Overall assessment
Safe
Combined score 0
· 0 findings after filtering
Summary
No findings — this scan came back clean.
Generated from finding counts. A plain-English summary was not
available for this scan.
Risk, by type
MalDet scores two different questions separately, because they call for
different responses: code can be badly written without being hostile, and
hostile code is not always badly written.
Vulnerability
Safe
(0)
Insecure coding an attacker could exploit. Usually mistakes,
and usually fixable in place.
Malicious pattern
Safe
(0)
Signs the code may be trying to do harm: hidden payloads,
credential access, persistence, exfiltration.
What each detector found
| Detector | Looks for |
High | Medium | Low | Total |
| No findings were recorded for this repository. |
0 of 0 findings
were rated more likely genuine than noise by the classifier.
How to read this report
- This is a static scan. The code was read, never executed.
Behaviour that only appears at runtime is outside what any of these detectors
can see.
- Findings are not all equally real. A classifier rates each
finding on how likely it is to be genuine rather than noise, and that rating
weights the scores. Measured against a hand-reviewed sample it reached
precision 0.52 and recall 0.62 — useful for ranking, not a verdict on any
single finding.
- A high score is not proof of malice. Security tools,
penetration-testing frameworks and malware research repositories contain the
same patterns as real malware by design. The two risk types above exist to
keep that distinction visible.
- Absence of findings is not proof of safety. A detector that
is not installed, or a language none of them parse, produces silence rather
than a warning.
- This scan is a snapshot. The repository may have changed
since 07 October 2026.