{"id":"profullstack.com/root-w3bs-os","name":"root-w3bs-os","commands":["root-w3bs-os"],"description":"Set up and maintain a W3BS OS box as root: accounts, SSH keys, zsh, Caddy sites, firewall, swap and confinement. Safe to re-run.","homepage":"https://w3bs.org/os","repository":"https://github.com/profullstack/cli-tools","license":"MIT","agentic":false,"latest_version":"0.1.0","vendor":"profullstack.com","install":"curl -fsSL https://raw.githubusercontent.com/profullstack/cli-tools/root-w3bs-os-v0.1.0/install-root-w3bs-os.sh | sh","publisher":"profullstack.com","signed":{"statement":{"commands":["root-w3bs-os"],"created_at":"2026-10-19T23:16:52Z","description":"Set up and maintain a W3BS OS box as root: accounts, SSH keys, zsh, Caddy sites, firewall, swap and confinement. Safe to re-run.","homepage":"https://w3bs.org/os","install":"curl -fsSL https://raw.githubusercontent.com/profullstack/cli-tools/root-w3bs-os-v0.1.0/install-root-w3bs-os.sh | sh","installer":{"sha256":"54f8d04f9abc8a0d11cd0f77564991519a555f412b8fa125b13ba91f59e7ddeb","url":"https://raw.githubusercontent.com/profullstack/cli-tools/root-w3bs-os-v0.1.0/install-root-w3bs-os.sh"},"license":"MIT","name":"root-w3bs-os","package":"profullstack.com/root-w3bs-os","repository":"https://github.com/profullstack/cli-tools","type":"w3bs-release/1","version":"0.1.0"},"signature":"-----BEGIN SSH SIGNATURE-----\nU1NIU0lHAAAAAQAAADMAAAALc3NoLWVkMjU1MTkAAAAgd22dMTD9clHZ+RPC5MDNqe5wTO\nRqVrWzMLzsE+86O98AAAAVdzNicy1yZWxlYXNlQHczYnMub3JnAAAAAAAAAAZzaGE1MTIA\nAABTAAAAC3NzaC1lZDI1NTE5AAAAQMWbQPDgSiEMNFD2n13hzakNGbac4Y3U0w+R1vvg6J\ntLNOwHdyNtDXisfoY7ScPFzaQltZT0Objo30KdfuT55wo=\n-----END SSH SIGNATURE-----","public_key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIHdtnTEw/XJR2fkTwuTAzanucEzkala1szC87BPvOjvf","fingerprint":"SHA256:Uhmgw2yMQFBJIsp9vM5WfbZtBwnWk9hSvu3atWtdodA"},"w3bs":"w3bs install profullstack.com/root-w3bs-os","scan":{"status":"passed","scanner":"threatcrush 0.13.30","filesScanned":402,"summary":{"critical":0,"high":15,"medium":12,"low":14,"info":0},"malware":0,"truncated":false,"version":"0.1.0","sources":{"installer":"https://raw.githubusercontent.com/profullstack/cli-tools/root-w3bs-os-v0.1.0/install-root-w3bs-os.sh","installerSha256":"54f8d04f9abc8a0d11cd0f77564991519a555f412b8fa125b13ba91f59e7ddeb","repository":"github.com/profullstack/cli-tools"},"notes":[],"scannedAt":"2026-11-01T22:56:19.441Z","findings":[{"ruleId":"py-ssrf-outbound-request","title":"outbound request to a non-constant URL","severity":"high","category":"code","cwe":"CWE-918","file":"source/dev2/dev2-site","line":151,"malware":false},{"ruleId":"py-ssrf-outbound-request","title":"outbound request to a non-constant URL","severity":"high","category":"code","cwe":"CWE-918","file":"source/dev2/dev2-site","line":1062,"malware":false},{"ruleId":"py-ssrf-outbound-request","title":"outbound request to a non-constant URL","severity":"high","category":"code","cwe":"CWE-918","file":"source/dev2/dev2-site","line":1799,"malware":false},{"ruleId":"sh-remote-script-execution","title":"network output piped into a shell","severity":"high","category":"code","cwe":"CWE-494","file":"source/root-ubuntu.sh","line":3262,"malware":false},{"ruleId":"sh-remote-script-execution","title":"network output piped into a shell","severity":"high","category":"code","cwe":"CWE-494","file":"source/root-ubuntu.sh","line":3263,"malware":false},{"ruleId":"sh-remote-script-execution","title":"network output piped into a shell","severity":"high","category":"code","cwe":"CWE-494","file":"source/root-ubuntu.sh","line":5168,"malware":false},{"ruleId":"sh-remote-script-execution","title":"network output piped into a shell","severity":"high","category":"code","cwe":"CWE-494","file":"source/root-ubuntu.sh","line":5172,"malware":false},{"ruleId":"sh-remote-script-execution","title":"network output piped into a shell","severity":"high","category":"code","cwe":"CWE-494","file":"source/root-w3bs-os.sh","line":3639,"malware":false},{"ruleId":"sh-remote-script-execution","title":"network output piped into a shell","severity":"high","category":"code","cwe":"CWE-494","file":"source/root-w3bs-os.sh","line":3640,"malware":false},{"ruleId":"sh-remote-script-execution","title":"network output piped into a shell","severity":"high","category":"code","cwe":"CWE-494","file":"source/root-w3bs-os.sh","line":5569,"malware":false},{"ruleId":"sh-remote-script-execution","title":"network output piped into a shell","severity":"high","category":"code","cwe":"CWE-494","file":"source/root-w3bs-os.sh","line":5579,"malware":false},{"ruleId":"sh-remote-script-execution","title":"network output piped into a shell","severity":"high","category":"code","cwe":"CWE-494","file":"source/root-w3bs-os.sh","line":5586,"malware":false},{"ruleId":"sh-remote-script-execution","title":"network output piped into a shell","severity":"high","category":"code","cwe":"CWE-494","file":"source/root-w3bs-os.sh","line":5602,"malware":false},{"ruleId":"sh-remote-script-execution","title":"network output piped into a shell","severity":"high","category":"code","cwe":"CWE-494","file":"source/root-w3bs-os.sh","line":5607,"malware":false},{"ruleId":"sh-plaintext-download","title":"download over plain HTTP","severity":"high","category":"code","cwe":"CWE-319","file":"source/root-w3bs-os.sh","line":6289,"malware":false},{"ruleId":"sql-template-interpolation","title":"SQL built from a template literal or f-string","severity":"medium","category":"code","cwe":"CWE-89","file":"source/dev2/dev2-site","line":1289,"malware":false},{"ruleId":"sql-template-interpolation","title":"SQL built from a template literal or f-string","severity":"medium","category":"code","cwe":"CWE-89","file":"source/dev2/dev2-site","line":1366,"malware":false},{"ruleId":"sh-remote-script-execution","title":"network output piped into a shell","severity":"medium","category":"code","cwe":"CWE-494","file":"source/root-ubuntu.sh","line":5376,"malware":false},{"ruleId":"redos-nested-quantifier","title":"regex with nested unbounded quantifiers","severity":"medium","category":"code","cwe":"CWE-1333","file":"source/src/domain-free.ts","line":56,"malware":false},{"ruleId":"redos-nested-quantifier","title":"regex with nested unbounded quantifiers","severity":"medium","category":"code","cwe":"CWE-1333","file":"source/src/emoji.ts","line":167,"malware":false},{"ruleId":"redos-nested-quantifier","title":"regex with nested unbounded quantifiers","severity":"medium","category":"code","cwe":"CWE-1333","file":"source/src/icon.ts","line":166,"malware":false},{"ruleId":"redos-nested-quantifier","title":"regex with nested unbounded quantifiers","severity":"medium","category":"code","cwe":"CWE-1333","file":"source/src/mail.ts","line":1060,"malware":false},{"ruleId":"sql-template-interpolation","title":"SQL built from a template literal or f-string","severity":"medium","category":"code","cwe":"CWE-89","file":"source/src/users-dump.ts","line":487,"malware":false},{"ruleId":"sql-string-concatenation","title":"SQL assembled by concatenation or interpolation","severity":"medium","category":"code","cwe":"CWE-89","file":"source/src/users-dump.ts","line":507,"malware":false},{"ruleId":"sql-template-interpolation","title":"SQL built from a template literal or f-string","severity":"medium","category":"code","cwe":"CWE-89","file":"source/src/users-dump.ts","line":540,"malware":false},{"ruleId":"sql-string-concatenation","title":"SQL assembled by concatenation or interpolation","severity":"medium","category":"code","cwe":"CWE-89","file":"source/src/users-dump.ts","line":574,"malware":false},{"ruleId":"redos-nested-quantifier","title":"regex with nested unbounded quantifiers","severity":"medium","category":"code","cwe":"CWE-1333","file":"source/src/wcag.ts","line":556,"malware":false},{"ruleId":"secret-generic-credential","title":"Hardcoded Credential","severity":"low","category":"secret","cwe":"CWE-798","file":"source/src/credentials.ts","line":41,"malware":false},{"ruleId":"secret-generic-credential","title":"Hardcoded Credential","severity":"low","category":"secret","cwe":"CWE-798","file":"source/src/credentials.ts","line":58,"malware":false},{"ruleId":"secret-generic-credential","title":"Hardcoded Credential","severity":"low","category":"secret","cwe":"CWE-798","file":"source/src/credentials.ts","line":61,"malware":false},{"ruleId":"secret-generic-credential","title":"Hardcoded Credential","severity":"low","category":"secret","cwe":"CWE-798","file":"source/src/credentials.ts","line":66,"malware":false},{"ruleId":"secret-generic-credential","title":"Hardcoded Credential","severity":"low","category":"secret","cwe":"CWE-798","file":"source/src/user-export.ts","line":689,"malware":false},{"ruleId":"secret-generic-credential","title":"Hardcoded Credential","severity":"low","category":"secret","cwe":"CWE-798","file":"source/src/user-export.ts","line":695,"malware":false},{"ruleId":"secret-generic-api-key","title":"Generic API Key","severity":"low","category":"secret","cwe":"CWE-798","file":"source/test/credentials.test.ts","line":208,"malware":false},{"ruleId":"secret-generic-credential","title":"Hardcoded Credential","severity":"low","category":"secret","cwe":"CWE-798","file":"source/test/mail.test.ts","line":141,"malware":false},{"ruleId":"secret-generic-credential","title":"Hardcoded Credential","severity":"low","category":"secret","cwe":"CWE-798","file":"source/test/proxy.test.ts","line":69,"malware":false},{"ruleId":"secret-generic-credential","title":"Hardcoded Credential","severity":"low","category":"secret","cwe":"CWE-798","file":"source/test/proxy.test.ts","line":85,"malware":false},{"ruleId":"secret-generic-credential","title":"Hardcoded Credential","severity":"low","category":"secret","cwe":"CWE-798","file":"source/test/shorten.test.ts","line":36,"malware":false},{"ruleId":"secret-database-url","title":"Database URL with credentials","severity":"low","category":"secret","cwe":"CWE-798","file":"source/test/users-dump.test.ts","line":108,"malware":false},{"ruleId":"secret-database-url","title":"Database URL with credentials","severity":"low","category":"secret","cwe":"CWE-798","file":"source/test/users-dump.test.ts","line":119,"malware":false},{"ruleId":"secret-database-url","title":"Database URL with credentials","severity":"low","category":"secret","cwe":"CWE-798","file":"source/test/users-dump.test.ts","line":120,"malware":false}]}}