Go modules · proxy.golang.org

github.com/luckypipewrench/agent-egress-bench

Llm Injection Payload, Credential file access

Why PkgRadar flagged v0.0.0-20260810133302-4298e7f0f298

Severity	Signal	Evidence
high	Llm Injection Payload	—
high	Llm Injection Payload	—

Showing signal labels only. Sign in to view the exact matched indicators for each finding.

Scanned versions

Version	Verdict	Score	Scanned (UTC)
`v0.0.0-20260810133302-4298e7f0f298`	High risk	134	2026-08-11
`v1.0.1-0.20260810103522-ab1ebcb59bf0`	High risk	134	2026-08-11
`v0.0.0-20260810103522-ab1ebcb59bf0`	High risk	134	2026-08-11
`v0.0.0-20260809210327-948312a68308`	High risk	134	2026-08-11
`v0.0.0-20260809194420-45905d68acdb`	High risk	134	2026-08-10
`v0.0.0-20260809172406-0473ac6d038c`	High risk	134	2026-08-10
`v0.0.0-20260809163502-681705abc9d1`	High risk	134	2026-08-10
`v1.0.1-0.20260809163502-681705abc9d1`	High risk	134	2026-08-10

Block this in CI

PkgRadar gates github.com/luckypipewrench/agent-egress-bench (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go github.com/luckypipewrench/[email protected]