2009Scape Wiki Api

What was checked

Plain notes from the hygiene checks.

• Permissions

  Concern

  requests shell access. No manifest field names shell or command execution. can delete files.

  PERMISSION_SHELL_UNDECLARED PERMISSION_DELETE_FILES

  demos/run_demo.py, line 48

  ran = subprocess.run([sys.executable, str(script), *arguments], check=False)

  src/wiki_api/dataset.py, line 64

  shutil.rmtree(left, ignore_errors=True)

  src/wiki_api/pipeline/staging/collectors.py, line 514

  subprocess.run(["git", "-C", str(checkout), *arguments], check=True)

  Show more

  src/wiki_api/pipeline/staging/collectors.py, line 707

  shutil.rmtree(run.checkout / CACHE_ROOT)

  src/wiki_api/pipeline/staging/upstream.py, line 40

  finished = subprocess.run(

  src/wiki_api/pipeline/staging/upstream.py, line 63

  subprocess.run([GIT, "-C", str(path), *arguments], check=True)

  src/wiki_api/pipeline/staging/upstream.py, line 68

  subprocess.run([GIT, "-C", str(path), "add", "-A"], check=True)

  src/wiki_api/pipeline/staging/upstream.py, line 69

  subprocess.run([GIT, "-C", str(path), "commit", "--quiet", "-m", name], check=True)

• Install and update

  Serious

  install fetches a script from the network.

  INSTALL_REMOTE_SCRIPT

  scripts/test_ci.sh, line 21

  curl -LsSf https://astral.sh/uv/install.sh | sh

• Network

  Concern

  can reach a host that is not written as a fixed address.

  NETWORK_NO_FIXED_HOST

  scripts/build_binary.sh, line 236

  if ! curl -fsSL "$from" | tar -xz -C "$TOOLS" nfpm; then

  scripts/container.sh, line 177

  if curl -fsS "http://$HOST:$PORT/health" >/dev/null 2>&1; then

  scripts/container.sh, line 235

  code="$(curl -sL -o /dev/null -w '%{http_code}' "$@")"

  Show more

  scripts/container.sh, line 275

  curl -s -H "authorization: Bearer $token" \

  scripts/release.sh, line 603

  "import urllib.request;urllib.request.urlopen('http://127.0.0.1:8000/health',timeout=2)" \

  scripts/release.sh, line 612

  "import urllib.request;print(urllib.request.urlopen('http://127.0.0.1:8000$path',timeout=5).status)" \

  src/wiki_api/dataset.py, line 32

  def fetch(settings: Settings, *, only: Sequence[str] = ()) -> Path:

  src/wiki_api/dataset.py, line 101

  into = fetch(settings, only=only)

  src/wiki_api/dataset.py, line 162

  assert fetching.fetch(settings) == tmp_path

  src/wiki_api/dataset.py, line 187

  fetching.fetch(_settings(tmp_path), only=("knowledge.sqlite3",))

  Dockerfile, line 72

  CMD ["python", "-c", "import urllib.request,os,sys; sys.exit(0 if urllib.request.urlopen('http://127.0.0.1:' + os.environ.get('WIKI_API_HTTP_PORT', '8000') + '/health', timeout=4).

• Secrets

  Concern

  reads a credential or environment file.

  SECRETS_PATH_CREDENTIAL SECRETS_PATH_DOTENV

  demos/claude_common.py, line 24

  ENV_NAME = ".env"

  demos/claude_common.py, line 29

  SIGNED_IN = Path.home() / ".claude" / ".credentials.json"

  demos/claude_common.py, line 47

  """Locate the .env a demonstration keeps its credential and settings in."""

  Show more

  src/wiki_api/config.py, line 76

  env_file=".env",

  .gitignore, line 24

  htmlcov/

  demos/claude_complex_query/README.md, line 78

  **a `.env` in this folder** (git-ignored) for the Anthropic credential.

  demos/claude_fuzzy_match/README.md, line 13

  Create a **`.env` in this folder** (git-ignored) for the Anthropic credential:

  demos/claude_mcp_attach/README.md, line 18

  Create a **`.env` in this folder** (git-ignored) for the Anthropic credential:

• Agent instructions

  Pass

  No instruction to ignore earlier instructions or to hide a step.

• Obfuscation

  Note

  a file was over the read cap and was not fully read.

  OBFUSCATION_FILE_OVER_READ_CAP

  uv.lock, line 1

  version = 1

• Licence

  Pass

  A licence file is present (LICENSE).

• Maintainer activity

  Pass

  The latest commit is within the last 365 days.

Get the full report on this tool, £49

Note

Hygiene check of commit b28409896bf0. requests shell access. No manifest field names shell or command execution. can delete files. install fetches a script from the network. can reach a host that is not written as a fixed address. reads a credential or environment file. a file was over the read cap and was not fully read.

Date and source

Date checked: 17 Oct 2026

Read how this letter is chosen