Go modules · proxy.golang.org
github.com/dibbla-agents/dibbla-cli
Go Generate Shell: //go:generate directive shells out to curl/wget/bash — runs during `go generate`.
Why PkgRadar flagged v1.2.40
| Severity | Signal | Evidence |
|---|---|---|
| medium | Go Generate Shell | //go:generate directive shells out to curl/wget/bash — runs during `go generate`. · github.com/dibbla-agents/[email protected]/internal/cmd/root.go |
| medium | Go Generate Shell | //go:generate directive shells out to curl/wget/bash — runs during `go generate`. · github.com/dibbla-agents/[email protected]/internal/cmd/skills/assets.go |
| medium | Remote Payload | matched "curl " · github.com/dibbla-agents/[email protected]/internal/cmd/aigateway/aigateway.go |
| medium | Remote Payload | matched "curl " · github.com/dibbla-agents/[email protected]/internal/cmd/run/run.go |
| medium | Remote Payload | matched "curl " · github.com/dibbla-agents/[email protected]/internal/cmd/skills/registry.go |
| medium | Remote Payload | matched "curl " · github.com/dibbla-agents/[email protected]/internal/cmd/wf/workflows.go |
| medium | Remote Payload | matched "raw.githubusercontent.com" · github.com/dibbla-agents/[email protected]/internal/templates/manifest.go |
Scanned versions
| Version | Verdict | Score | Scanned (UTC) |
|---|---|---|---|
v1.2.40 | High risk | 95 | 2026-06-07 |
Block this in CI
pkgradar gate --ecosystem go github.com/dibbla-agents/[email protected]