code-change-verification

Warn

Audited by Runlayer on Feb 21, 2026

Risk Level: MEDIUM
Scan Summary
Max Score
78%
Files
3
Flagged
3
Chunks
3
Flagged Files (3)
SKILL.mdHIGH
78.3%

Malicious tool definition detected

Tool: SKILL.md Description: --- name: code-change-verification description: Run the mandatory verification stack when changes affect runtime code, tests, or build/test behavior in the OpenAI Agents JS monorepo.

scripts/run.ps1HIGH
78.3%

Malicious tool definition detected

Tool: scripts/run.ps1 Description: Set-StrictMode -Version Latest $ErrorActionPreference = "Stop" $scriptDir = Split-Path -Parent $MyInvocation.MyCommand.Definition $repoRoot = $null try { $repoRoot = (& git -C $scriptDir rev-parse --show-toplevel 2>$null) } catch { $repoRoot = $null } if (-not $repoRoot) { $repoRoot = Resolve-Path (Join-Path $scriptDir "..\..\..\..") } Set-Location $repoRoot function Invoke-PnpmStep { param(

scripts/run.shHIGH
78.3%

Malicious tool definition detected

Tool: scripts/run.sh Description: #!/usr/bin/env bash set -euo pipefail SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)" if command -v git >/dev/null 2>&1; then REPO_ROOT="$(git -C "${SCRIPT_DIR}" rev-parse --show-toplevel 2>/dev/null || true)" fi REPO_ROOT="${REPO_ROOT:-$(cd "${SCRIPT_DIR}/../../../.." && pwd)}" cd "${REPO_ROOT}" echo "Running pnpm i..." pnpm i

Audit Metadata
Max File Score
78%
Classification
UNKNOWN_SERVER
Files Scanned
3
Files Flagged
3
Chunks Analyzed
3
Analyzed
Feb 21, 2026, 05:59 AM
Security Audit — runlayer — code-change-verification