{"id":"ugig.net/ugig","name":"ugig","commands":["ugig"],"examples":[{"run":"ugig login","does":"Log in by approving this device in a browser"},{"run":"ugig auth whoami","does":"Check which account the CLI is using"},{"run":"ugig gigs list --search \"<keyword>\"","does":"Browse open gigs matching a keyword"},{"run":"ugig apply <gig-id> --cover-letter \"<text>\"","does":"Apply to a gig with a cover letter"}],"description":"CLI for ugig.net, a marketplace for AI-assisted engineers and skilled workers.","homepage":"https://ugig.net","repository":"https://github.com/profullstack/ugig.net","license":"MIT","agentic":false,"latest_version":"1.5.1","vendor":"Profullstack","install":"curl -fsSL https://ugig.net/install.sh | bash","publisher":"profullstack","w3bs":"w3bs install ugig.net/ugig","scan":{"status":"passed","scanner":"threatcrush 0.13.30","filesScanned":1462,"summary":{"critical":0,"high":1,"medium":12,"low":53,"info":0},"malware":0,"truncated":false,"version":"1.5.1","sources":{"installer":"https://ugig.net/install.sh","installerSha256":"03d6f596d0180fa6d6310ff46062765349367bdcd480a63035cd73812489678a","repository":"github.com/profullstack/ugig.net"},"notes":[],"scannedAt":"2026-11-01T22:56:46.206Z","findings":[{"ruleId":"js-ssrf-outbound-request","title":"outbound request to a non-constant URL","severity":"high","category":"code","cwe":"CWE-918","file":"source/scripts/scan-all-skills.ts","line":38,"malware":false},{"ruleId":"js-open-redirect","title":"redirect to a non-constant destination","severity":"medium","category":"code","cwe":"CWE-601","file":"source/src/app/agent-login/AgentLoginForm.tsx","line":38,"malware":false},{"ruleId":"js-unescaped-html-sink","title":"unescaped HTML rendering","severity":"medium","category":"code","cwe":"CWE-79","file":"source/src/app/blog/[slug]/page.tsx","line":80,"malware":false},{"ruleId":"js-open-redirect","title":"redirect to a non-constant destination","severity":"medium","category":"code","cwe":"CWE-601","file":"source/src/app/checkout/CheckoutClient.tsx","line":77,"malware":false},{"ruleId":"js-open-redirect","title":"redirect to a non-constant destination","severity":"medium","category":"code","cwe":"CWE-601","file":"source/src/app/dashboard/subscription/page.tsx","line":102,"malware":false},{"ruleId":"js-open-redirect","title":"redirect to a non-constant destination","severity":"medium","category":"code","cwe":"CWE-601","file":"source/src/app/dashboard/subscription/page.tsx","line":114,"malware":false},{"ruleId":"js-unescaped-html-sink","title":"unescaped HTML rendering","severity":"medium","category":"code","cwe":"CWE-79","file":"source/src/app/page.tsx","line":70,"malware":false},{"ruleId":"js-unescaped-html-sink","title":"unescaped HTML rendering","severity":"medium","category":"code","cwe":"CWE-79","file":"source/src/app/pricing/page.tsx","line":84,"malware":false},{"ruleId":"js-open-redirect","title":"redirect to a non-constant destination","severity":"medium","category":"code","cwe":"CWE-601","file":"source/src/components/funding/FundingClient.tsx","line":138,"malware":false},{"ruleId":"js-open-redirect","title":"redirect to a non-constant destination","severity":"medium","category":"code","cwe":"CWE-601","file":"source/src/components/gigs/BuyNowButton.tsx","line":120,"malware":false},{"ruleId":"js-unescaped-html-sink","title":"unescaped HTML rendering","severity":"medium","category":"code","cwe":"CWE-79","file":"source/src/components/layout/PitFooter.tsx","line":25,"malware":false},{"ruleId":"js-dynamic-code-execution","title":"dynamic code execution","severity":"medium","category":"code","cwe":"CWE-95","file":"source/src/lib/skills/metadata-extract.ts","line":300,"malware":false},{"ruleId":"js-dynamic-code-execution","title":"dynamic code execution","severity":"medium","category":"code","cwe":"CWE-95","file":"source/src/lib/skills/security-scan.ts","line":48,"malware":false},{"ruleId":"secret-generic-credential","title":"Hardcoded Credential","severity":"low","category":"secret","cwe":"CWE-798","file":"source/cli/src/commands/auth.test.ts","line":66,"malware":false},{"ruleId":"secret-generic-credential","title":"Hardcoded Credential","severity":"low","category":"secret","cwe":"CWE-798","file":"source/cli/src/commands/auth.test.ts","line":85,"malware":false},{"ruleId":"secret-generic-credential","title":"Hardcoded Credential","severity":"low","category":"secret","cwe":"CWE-798","file":"source/cli/src/commands/webhooks.test.ts","line":60,"malware":false},{"ruleId":"secret-generic-credential","title":"Hardcoded Credential","severity":"low","category":"secret","cwe":"CWE-798","file":"source/cli/src/commands/webhooks.test.ts","line":72,"malware":false},{"ruleId":"secret-generic-credential","title":"Hardcoded Credential","severity":"low","category":"secret","cwe":"CWE-798","file":"source/cli/src/commands/webhooks.test.ts","line":109,"malware":false},{"ruleId":"secret-generic-credential","title":"Hardcoded Credential","severity":"low","category":"secret","cwe":"CWE-798","file":"source/cli/src/commands/webhooks.test.ts","line":112,"malware":false},{"ruleId":"secret-generic-api-key","title":"Generic API Key","severity":"low","category":"secret","cwe":"CWE-798","file":"source/docs/agents/integration-guide.md","line":893,"malware":false},{"ruleId":"secret-generic-credential","title":"Hardcoded Credential","severity":"low","category":"secret","cwe":"CWE-798","file":"source/src/app/api/auth/agent-register/route.test.ts","line":27,"malware":false},{"ruleId":"secret-generic-credential","title":"Hardcoded Credential","severity":"low","category":"secret","cwe":"CWE-798","file":"source/src/app/api/auth/login/route.test.ts","line":53,"malware":false},{"ruleId":"secret-generic-credential","title":"Hardcoded Credential","severity":"low","category":"secret","cwe":"CWE-798","file":"source/src/app/api/auth/login/route.test.ts","line":68,"malware":false},{"ruleId":"secret-generic-credential","title":"Hardcoded Credential","severity":"low","category":"secret","cwe":"CWE-798","file":"source/src/app/api/auth/login/route.test.ts","line":87,"malware":false},{"ruleId":"secret-generic-credential","title":"Hardcoded Credential","severity":"low","category":"secret","cwe":"CWE-798","file":"source/src/app/api/auth/signup/route.test.ts","line":172,"malware":false},{"ruleId":"secret-generic-credential","title":"Hardcoded Credential","severity":"low","category":"secret","cwe":"CWE-798","file":"source/src/app/api/auth/signup/route.test.ts","line":196,"malware":false},{"ruleId":"secret-generic-credential","title":"Hardcoded Credential","severity":"low","category":"secret","cwe":"CWE-798","file":"source/src/app/api/auth/signup/route.test.ts","line":215,"malware":false},{"ruleId":"secret-generic-credential","title":"Hardcoded Credential","severity":"low","category":"secret","cwe":"CWE-798","file":"source/src/app/api/auth/signup/route.test.ts","line":228,"malware":false},{"ruleId":"secret-generic-credential","title":"Hardcoded Credential","severity":"low","category":"secret","cwe":"CWE-798","file":"source/src/app/api/auth/signup/route.test.ts","line":267,"malware":false},{"ruleId":"secret-generic-credential","title":"Hardcoded Credential","severity":"low","category":"secret","cwe":"CWE-798","file":"source/src/app/api/auth/signup/route.test.ts","line":297,"malware":false},{"ruleId":"secret-generic-credential","title":"Hardcoded Credential","severity":"low","category":"secret","cwe":"CWE-798","file":"source/src/app/api/auth/signup/route.test.ts","line":329,"malware":false},{"ruleId":"secret-generic-credential","title":"Hardcoded Credential","severity":"low","category":"secret","cwe":"CWE-798","file":"source/src/app/api/auth/signup/route.test.ts","line":346,"malware":false},{"ruleId":"secret-generic-credential","title":"Hardcoded Credential","severity":"low","category":"secret","cwe":"CWE-798","file":"source/src/app/api/gigs/[id]/buy/route.test.ts","line":46,"malware":false},{"ruleId":"secret-generic-credential","title":"Hardcoded Credential","severity":"low","category":"secret","cwe":"CWE-798","file":"source/src/app/api/gigs/[id]/buy/route.test.ts","line":118,"malware":false},{"ruleId":"secret-generic-credential","title":"Hardcoded Credential","severity":"low","category":"secret","cwe":"CWE-798","file":"source/src/app/api/gigs/[id]/buy/route.test.ts","line":177,"malware":false},{"ruleId":"secret-generic-credential","title":"Hardcoded Credential","severity":"low","category":"secret","cwe":"CWE-798","file":"source/src/app/api/orders/[id]/release/route.test.ts","line":18,"malware":false},{"ruleId":"js-dynamic-code-execution","title":"dynamic code execution","severity":"low","category":"code","cwe":"CWE-95","file":"source/src/app/api/skills/[slug]/scan/route.test.ts","line":212,"malware":false},{"ruleId":"js-dynamic-code-execution","title":"dynamic code execution","severity":"low","category":"code","cwe":"CWE-95","file":"source/src/app/api/skills/[slug]/scan/route.test.ts","line":223,"malware":false},{"ruleId":"js-dynamic-code-execution","title":"dynamic code execution","severity":"low","category":"code","cwe":"CWE-95","file":"source/src/app/api/skills/[slug]/scan/route.test.ts","line":239,"malware":false},{"ruleId":"secret-generic-credential","title":"Hardcoded Credential","severity":"low","category":"secret","cwe":"CWE-798","file":"source/src/lib/api.test.ts","line":126,"malware":false},{"ruleId":"secret-generic-credential","title":"Hardcoded Credential","severity":"low","category":"secret","cwe":"CWE-798","file":"source/src/lib/api.test.ts","line":131,"malware":false},{"ruleId":"secret-generic-credential","title":"Hardcoded Credential","severity":"low","category":"secret","cwe":"CWE-798","file":"source/src/lib/coinpay-oauth.test.ts","line":20,"malware":false},{"ruleId":"js-dynamic-code-execution","title":"dynamic code execution","severity":"low","category":"code","cwe":"CWE-95","file":"source/src/lib/skills/composite-scanner.test.ts","line":106,"malware":false},{"ruleId":"js-dynamic-code-execution","title":"dynamic code execution","severity":"low","category":"code","cwe":"CWE-95","file":"source/src/lib/skills/secureclaw-scanner.test.ts","line":36,"malware":false},{"ruleId":"js-dynamic-code-execution","title":"dynamic code execution","severity":"low","category":"code","cwe":"CWE-95","file":"source/src/lib/skills/secureclaw-scanner.test.ts","line":44,"malware":false},{"ruleId":"js-dynamic-code-execution","title":"dynamic code execution","severity":"low","category":"code","cwe":"CWE-95","file":"source/src/lib/skills/secureclaw-scanner.test.ts","line":66,"malware":false},{"ruleId":"js-dynamic-code-execution","title":"dynamic code execution","severity":"low","category":"code","cwe":"CWE-95","file":"source/src/lib/skills/secureclaw-scanner.test.ts","line":81,"malware":false},{"ruleId":"js-dynamic-code-execution","title":"dynamic code execution","severity":"low","category":"code","cwe":"CWE-95","file":"source/src/lib/skills/secureclaw-scanner.test.ts","line":94,"malware":false},{"ruleId":"js-dynamic-code-execution","title":"dynamic code execution","severity":"low","category":"code","cwe":"CWE-95","file":"source/src/lib/skills/secureclaw-scanner.test.ts","line":103,"malware":false},{"ruleId":"js-dynamic-code-execution","title":"dynamic code execution","severity":"low","category":"code","cwe":"CWE-95","file":"source/src/lib/skills/secureclaw-scanner.test.ts","line":118,"malware":false},{"ruleId":"js-dynamic-code-execution","title":"dynamic code execution","severity":"low","category":"code","cwe":"CWE-95","file":"source/src/lib/skills/secureclaw-scanner.test.ts","line":144,"malware":false},{"ruleId":"js-dynamic-code-execution","title":"dynamic code execution","severity":"low","category":"code","cwe":"CWE-95","file":"source/src/lib/skills/secureclaw-scanner.test.ts","line":162,"malware":false},{"ruleId":"js-dynamic-code-execution","title":"dynamic code execution","severity":"low","category":"code","cwe":"CWE-95","file":"source/src/lib/skills/security-scan.test.ts","line":28,"malware":false},{"ruleId":"js-dynamic-code-execution","title":"dynamic code execution","severity":"low","category":"code","cwe":"CWE-95","file":"source/src/lib/skills/url-import.test.ts","line":178,"malware":false},{"ruleId":"js-dynamic-code-execution","title":"dynamic code execution","severity":"low","category":"code","cwe":"CWE-95","file":"source/src/lib/skills/url-import.test.ts","line":191,"malware":false},{"ruleId":"secret-jwt","title":"JSON Web Token","severity":"low","category":"secret","cwe":"CWE-798","file":"source/src/lib/supabase/service.test.ts","line":16,"malware":false},{"ruleId":"secret-jwt","title":"JSON Web Token","severity":"low","category":"secret","cwe":"CWE-798","file":"source/src/lib/supabase/service.test.ts","line":40,"malware":false},{"ruleId":"secret-generic-credential","title":"Hardcoded Credential","severity":"low","category":"secret","cwe":"CWE-798","file":"source/src/lib/validations.test.ts","line":148,"malware":false},{"ruleId":"secret-generic-credential","title":"Hardcoded Credential","severity":"low","category":"secret","cwe":"CWE-798","file":"source/src/lib/validations.test.ts","line":512,"malware":false},{"ruleId":"secret-generic-credential","title":"Hardcoded Credential","severity":"low","category":"secret","cwe":"CWE-798","file":"source/src/lib/validations.test.ts","line":523,"malware":false},{"ruleId":"secret-generic-credential","title":"Hardcoded Credential","severity":"low","category":"secret","cwe":"CWE-798","file":"source/src/lib/validations.test.ts","line":538,"malware":false},{"ruleId":"secret-generic-credential","title":"Hardcoded Credential","severity":"low","category":"secret","cwe":"CWE-798","file":"source/src/lib/validations.test.ts","line":548,"malware":false},{"ruleId":"secret-generic-credential","title":"Hardcoded Credential","severity":"low","category":"secret","cwe":"CWE-798","file":"source/src/lib/validations.test.ts","line":557,"malware":false},{"ruleId":"secret-generic-credential","title":"Hardcoded Credential","severity":"low","category":"secret","cwe":"CWE-798","file":"source/src/lib/validations.test.ts","line":567,"malware":false},{"ruleId":"secret-generic-credential","title":"Hardcoded Credential","severity":"low","category":"secret","cwe":"CWE-798","file":"source/src/lib/validations.test.ts","line":582,"malware":false},{"ruleId":"secret-generic-credential","title":"Hardcoded Credential","severity":"low","category":"secret","cwe":"CWE-798","file":"source/src/lib/webhooks/supabase-store.test.ts","line":11,"malware":false}]}}