mirror of
https://github.com/bytedance/deer-flow.git
synced 2026-10-30 15:10:41 +00:00
38 lines
1.6 KiB
JSON
38 lines
1.6 KiB
JSON
{
|
|
"schema_version": "deerflow.skill-review-waivers.v1",
|
|
"waivers": [
|
|
{
|
|
"package": "skills/public/skill-creator",
|
|
"source": "skillscan",
|
|
"rule_id": "python-subprocess",
|
|
"path": "scripts/improve_description.py",
|
|
"line": 35,
|
|
"evidence": "subprocess.run",
|
|
"file_sha256": "sha256:87d864570220b699fac52da309d2d6efdb060647bfebc74f768128e646accf80",
|
|
"preapproved_file_sha256s": [
|
|
"sha256:2877bde08bf3f437b9dae3d57585a0840b9b1024736d2e5c6c657b71899269d0",
|
|
"sha256:83e82d6049147a1d8b28a5155b35eed270e9053e9bde8f99893b597a2e7c3974"
|
|
],
|
|
"reason": "Required Claude CLI invocation uses a fixed executable, an argv list, prompt input over stdin, and shell=False.",
|
|
"expires_on": "2027-02-28"
|
|
},
|
|
{
|
|
"package": "skills/public/skill-creator",
|
|
"source": "skillscan",
|
|
"rule_id": "python-subprocess",
|
|
"path": "scripts/run_eval.py",
|
|
"line": 85,
|
|
"evidence": "subprocess.Popen",
|
|
"file_sha256": "sha256:43e3b8f80dbf69c343967ba77e268fae991d9fa3ed68b32a0ff02532cd48657f",
|
|
"preapproved_file_sha256s": [
|
|
"sha256:ea2521ba41c8fd16b2900758c890bb6c6d2b4b01da10b4a860facb8587ed0bde",
|
|
"sha256:f86a5c9a3339ae90ffd59635201d09f2c8019dc35b72e517228d31d6b3e1912c",
|
|
"sha256:bd7bc409540265f91eac3f2c82e104b6db0e0aeb12b3aa7ef4d79116cff8791b",
|
|
"sha256:9de295d782b3d8e88b03c2489ea2bac64c894bab1f88302ce68b8fc61f72c535"
|
|
],
|
|
"reason": "Required Claude CLI invocation uses a fixed executable, an argv list, captured output streams, and shell=False.",
|
|
"expires_on": "2027-02-28"
|
|
}
|
|
]
|
|
}
|