ShipItClean — 0593f6ee24e6

5

Total Findings

5

Medium

island-browser-code →

AIAI Threat Analysis

Loading AI analysis...

5 raw scanner findings — 5 medium

▶ Raw Scanner Output — 5 pre-cleanup findings

⚠ Pre-Cleanup Report
This is the raw, unprocessed output from all scanner agents before AI analysis. Do not use this to fix issues individually. Multiple agents attack from different angles and frequently report the same underlying vulnerability, resulting in significant duplication. Architectural issues also appear as many separate line-level findings when they require a single structural fix.

Use the Copy Fix Workflow button above to get the AI-cleaned workflow — it deduplicates findings, removes false positives, and provides actionable steps. This raw output is provided for transparency and audit purposes only.

MEDIUM[semgrep] bash.lang.security.ifs-tampering.ifs-tampering

[redacted]/xdg-mime.sh:291

[AGENTS: baseline:semgrep]security

The special variable IFS affects how splitting takes place when expanding unquoted variables. Don't set it globally. Prefer a dedicated utility such as 'cut' or 'awk' if you need to split input data. If you must use 'read', set IFS locally using e.g. 'IFS="," read -a my_array'.

MEDIUM[semgrep] bash.lang.security.ifs-tampering.ifs-tampering

[redacted]/xdg-settings.sh:191

[AGENTS: baseline:semgrep]security

The special variable IFS affects how splitting takes place when expanding unquoted variables. Don't set it globally. Prefer a dedicated utility such as 'cut' or 'awk' if you need to split input data. If you must use 'read', set IFS locally using e.g. 'IFS="," read -a my_array'.

MEDIUM[semgrep] bash.lang.security.ifs-tampering.ifs-tampering

[redacted]/xdg-settings.sh:795

[AGENTS: baseline:semgrep]security

The special variable IFS affects how splitting takes place when expanding unquoted variables. Don't set it globally. Prefer a dedicated utility such as 'cut' or 'awk' if you need to split input data. If you must use 'read', set IFS locally using e.g. 'IFS="," read -a my_array'.

MEDIUM[semgrep] bash.lang.security.ifs-tampering.ifs-tampering

[redacted]/xdg-settings.sh:828

[AGENTS: baseline:semgrep]security

The special variable IFS affects how splitting takes place when expanding unquoted variables. Don't set it globally. Prefer a dedicated utility such as 'cut' or 'awk' if you need to split input data. If you must use 'read', set IFS locally using e.g. 'IFS="," read -a my_array'.

MEDIUM[semgrep] bash.lang.security.ifs-tampering.ifs-tampering

[redacted]/xdg-settings.sh:836

[AGENTS: baseline:semgrep]security

The special variable IFS affects how splitting takes place when expanding unquoted variables. Don't set it globally. Prefer a dedicated utility such as 'cut' or 'awk' if you need to split input data. If you must use 'read', set IFS locally using e.g. 'IFS="," read -a my_array'.

Note: Fixing issues can create a domino effect — resolving one finding often surfaces new ones that were previously hidden. Multiple scan-and-fix cycles may be needed until you’re satisfied no further issues remain. How deep you go is your call.