PkgRadar

Go modules · proxy.golang.org

github.com/boshu2/agentops/cli

Remote Payload: matched "curl "

Why PkgRadar flagged v0.0.0-20260601011709-f47a7c5727de

SeveritySignalEvidence
mediumRemote Payloadmatched "curl " · github.com/boshu2/agentops/[email protected]/cmd/ao/demo.go
mediumRemote Payloadmatched "curl " · github.com/boshu2/agentops/[email protected]/cmd/ao/seed.go
mediumRemote Payloadmatched "curl " · github.com/boshu2/agentops/[email protected]/internal/doctor/fix_bridges.go
mediumRemote Payloadmatched "curl " · github.com/boshu2/agentops/[email protected]/internal/doctor/fix_cliconfig.go
mediumRemote Payloadmatched "raw.githubusercontent.com" · github.com/boshu2/agentops/[email protected]/internal/quality/skills_codex.go

Scanned versions

VersionVerdictScoreScanned (UTC)
v0.0.0-20260601011709-f47a7c5727deHigh risk652026-06-02
v0.0.0-20260528063904-b39feb843d6fHigh risk652026-05-30
v0.0.0-20260528055518-94fd8eafea25High risk652026-05-30
v0.0.0-20260528051214-3e069b278a66High risk652026-05-30
v0.0.0-20260529023009-de0699a4937eReview652026-05-30
v0.0.0-20260529012704-f28ee038f65bReview652026-05-30
v0.0.0-20260529011207-e50e9aca80e0Review652026-05-30
v0.0.0-20260529004439-4e4842865d50Review652026-05-30
v0.0.0-20260528220103-471537ed2d18Review652026-05-30

Block this in CI

PkgRadar gates github.com/boshu2/agentops/cli (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go github.com/boshu2/agentops/[email protected]