PyPI · pypi.org

skcapstone

Py Runtime Dynamic Dangerous Import: Dynamic __import__('os') — reflection bypass for static checks.

Why PkgRadar flagged 0.6.8

Severity	Signal	Evidence
high	Py Runtime Dynamic Dangerous Import	Dynamic __import__('os') — reflection bypass for static checks. · skcapstone-0.6.8/src/skcapstone/onboard.py
medium	Remote Payload	matched "curl " · skcapstone-0.6.8/src/skcapstone/data/sk-agent-picker.sh

Scanned versions

Version	Verdict	Score	Scanned (UTC)
`0.6.8`	High risk	42	2026-06-05

Block this in CI

PkgRadar gates skcapstone (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem pypi skcapstone==0.6.8