deer-flow/.github/skill-review-waivers.v1.json

34 lines
1.3 KiB
JSON

{
"schema_version": "deerflow.skill-review-waivers.v1",
"waivers": [
{
"package": "skills/public/skill-creator",
"source": "skillscan",
"rule_id": "python-subprocess",
"path": "scripts/improve_description.py",
"line": 35,
"evidence": "subprocess.run",
"file_sha256": "sha256:87d864570220b699fac52da309d2d6efdb060647bfebc74f768128e646accf80",
"preapproved_file_sha256s": [
"sha256:2877bde08bf3f437b9dae3d57585a0840b9b1024736d2e5c6c657b71899269d0"
],
"reason": "Required Claude CLI invocation uses a fixed executable, an argv list, prompt input over stdin, and shell=False.",
"expires_on": "2027-02-28"
},
{
"package": "skills/public/skill-creator",
"source": "skillscan",
"rule_id": "python-subprocess",
"path": "scripts/run_eval.py",
"line": 85,
"evidence": "subprocess.Popen",
"file_sha256": "sha256:43e3b8f80dbf69c343967ba77e268fae991d9fa3ed68b32a0ff02532cd48657f",
"preapproved_file_sha256s": [
"sha256:ea2521ba41c8fd16b2900758c890bb6c6d2b4b01da10b4a860facb8587ed0bde"
],
"reason": "Required Claude CLI invocation uses a fixed executable, an argv list, captured output streams, and shell=False.",
"expires_on": "2027-02-28"
}
]
}