Cargo · crates.io
dirge-agent
Rs Build Time Fs Out Of Band: Filesystem path outside the build OUT_DIR / cargo cache (/etc, $HOME, ~/.ssh, /tmp/*.sh).
Why PkgRadar flagged 0.7.4
| Severity | Signal | Evidence |
|---|---|---|
| high | Rs Build Time Fs Out Of Band | Filesystem path outside the build OUT_DIR / cargo cache (/etc, $HOME, ~/.ssh, /tmp/*.sh). · dirge-agent-0.7.4/src/permission/engine/build.rs |
| medium | Rs Build Time Command | Process spawn (std::process::Command) at build time. · dirge-agent-0.7.4/build.rs |
| medium | Remote Payload | matched "curl " · dirge-agent-0.7.4/src/agent/tools/skill.rs |
| medium | Remote Payload | matched "curl " · dirge-agent-0.7.4/src/extras/memory_db.rs |
| medium | Remote Payload | matched "curl " · dirge-agent-0.7.4/src/extras/session_db_tests.rs |
| medium | Remote Payload | matched "curl " · dirge-agent-0.7.4/src/extras/skills/guard.rs |
| medium | Remote Payload | matched "curl " · dirge-agent-0.7.4/src/extras/skills/manager.rs |
Scanned versions
| Version | Verdict | Score | Scanned (UTC) |
|---|---|---|---|
0.7.4 | High risk | 140 | 2026-06-17 |
0.7.3 | High risk | 140 | 2026-06-17 |
0.7.2 | High risk | 140 | 2026-06-15 |
0.7.1 | High risk | 140 | 2026-06-15 |
0.6.4 | High risk | 140 | 2026-06-14 |
0.6.3 | High risk | 140 | 2026-06-13 |
0.6.2 | High risk | 140 | 2026-06-12 |
0.6.1 | High risk | 140 | 2026-06-11 |
0.6.0 | High risk | 140 | 2026-06-11 |
0.5.2 | High risk | 140 | 2026-06-11 |
0.5.1 | High risk | 140 | 2026-06-10 |
0.5.0 | High risk | 140 | 2026-06-10 |
0.4.1 | High risk | 140 | 2026-06-08 |
0.4.0 | High risk | 140 | 2026-06-08 |
0.3.1 | High risk | 110 | 2026-06-05 |
0.2.4 | High risk | 110 | 2026-06-03 |
0.2.3 | High risk | 110 | 2026-06-02 |
0.2.2 | High risk | 110 | 2026-05-31 |
0.2.1 | High risk | 110 | 2026-05-31 |
0.2.0 | High risk | 110 | 2026-05-31 |
0.1.0 | High risk | 110 | 2026-05-30 |
Block this in CI
pkgradar gate --ecosystem cargo [email protected]