ProdPilot

What was checked

Plain notes from the hygiene checks.

• Permissions

  Concern

  requests shell access. No manifest field names shell or command execution. can delete files.

  PERMISSION_SHELL_UNDECLARED PERMISSION_DELETE_FILES

  src/prodpilot/builds.py, line 143

  done = subprocess.run(["docker", *args], capture_output=True, text=True,

  src/prodpilot/builds.py, line 149

  subprocess.run(["docker", "kill", args[args.index("--name") + 1]],

  src/prodpilot/ci.py, line 129

  return subprocess.run(["git", "-C", str(root), *args], capture_output=True,

  Show more

  src/prodpilot/ci.py, line 195

  shutil.rmtree(holder)

  src/prodpilot/config.py, line 150

  return subprocess.run(

  src/prodpilot/connect.py, line 68

  done = subprocess.run(

  src/prodpilot/connect.py, line 189

  run: Run = subprocess.run, user: str | Path | None = None) -> Connected:

  src/prodpilot/dataset.py, line 292

  done = subprocess.run(step, cwd=str(root), capture_output=True, text=True)

• Install and update

  Pass

  No install-time script found, and dependencies are pinned or absent.

• Network

  Serious

  accepts a host from input, with no fixed list in this file.

  NETWORK_HOST_FROM_INPUT

  src/prodpilot/buildtest.py, line 282

  with urllib.request.urlopen(url, timeout=5) as reply:

  src/prodpilot/cicd.py, line 200

  with urllib.request.urlopen(request, timeout=30) as reply:

  src/prodpilot/cicd.py, line 270

  reply = self.fetch(url, method, self.headers(), raw)

  Show more

  src/prodpilot/cicd.py, line 368

  code=$(curl --silent --show-error -o deploy.json -w "%{{http_code}}" -X POST {auth} "{RENDER}/services/$SERVICE_ID/deploys")

  src/prodpilot/cicd.py, line 372

  curl --fail --silent --show-error {auth} "{RENDER}/services/$SERVICE_ID/deploys?limit=100" > deploys.json

  src/prodpilot/cicd.py, line 390

  status=$(curl --fail --silent --show-error {auth} "{RENDER}/services/$SERVICE_ID/deploys/$DEPLOY_ID" | python3 -c '{READ_STATUS}' || true)

  src/prodpilot/cicd.py, line 410

  if curl --fail --silent --show-error "${{{{ secrets.{APP_URL} }}}}{path}" > /dev/null; then

  src/prodpilot/dataset.py, line 269

  def fetch(entry: Entry, into: str | Path = CACHE) -> Path:

  src/prodpilot/smoke.py, line 184

  with urllib.request.urlopen(request, timeout=20) as reply:

  src/prodpilot/smoke.py, line 230

  answer = fetch(url)

  src/prodpilot/smoke.py, line 256

  answer = fetch(url)

• Secrets

  Concern

  reads a credential or environment file.

  SECRETS_PATH_DOTENV

  src/prodpilot/applying.py, line 177

  """Add each listed key an existing .env.example does not declare yet, as KEY=.

  src/prodpilot/applying.py, line 179

  A missing .env.example is left missing: creating it is ENV-001's own fix,

  src/prodpilot/applying.py, line 182

  path = root / ".env.example"

  Show more

  src/prodpilot/applying.py, line 229

  done += f", and declared {', '.join(keys)} in .env.example"

  src/prodpilot/astchecks.py, line 775

  for name in (".env.example", ".env.sample", ".env.template"):

  src/prodpilot/astchecks.py, line 818

  return Finding(rule, Status.SKIPPED, ".env.example", None,

  src/prodpilot/astchecks.py, line 821

  return Finding(rule, Status.FAIL, ".env.example", None,

  src/prodpilot/astchecks.py, line 822

  f"no .env.example, but the code reads {len(used)} environment key(s)")

• Agent instructions

  Pass

  No instruction to ignore earlier instructions or to hide a step.

• Obfuscation

  Note

  a file was over the read cap and was not fully read.

  OBFUSCATION_FILE_OVER_READ_CAP

  src/prodpilot/model/model.joblib, line 1

  ���}�(�model��sklearn.calibration��CalibratedClassifierCV���)��}�(� estimator��:sklearn.ensemble._hist_gradient_boosting.gradient_boosting��

  tests/baseline/v1_0_0.json, line 1

  {

• Licence

  Pass

  A licence file is present (LICENSE).

• Maintainer activity

  Pass

  The latest commit is within the last 365 days.

Get the full report on this tool, £49

Note

Hygiene check of commit eaa362c26585. requests shell access. No manifest field names shell or command execution. can delete files. accepts a host from input, with no fixed list in this file. reads a credential or environment file. a file was over the read cap and was not fully read.

Date and source

Date checked: 24 Oct 2026

Read how this letter is chosen