w3bs.AccountStart building
PACKAGES / Profullstack

outreachgraph

og, the OutreachGraph command line: approval queue, prospects, campaigns and imports over the /api/v1 API, through the same policy gates as the web app.

ThreatCrush · No malware found
INSTALLw3bs install outreachgraph.com/outreachgraph

No w3bs yet? curl -fsSL https://w3bs.org/install.sh | sh

Get started

What to type once it is installed.

  1. w3bs install outreachgraph.com/outreachgraphInstall outreachgraph and track it for updates
  2. og todayShow the approval queue
  3. og prospectsList ranked prospects
  4. og jobs search "senior software engineer (remote)"Find job posts and the people behind them
  5. og linkpost <url> --to linkedin,xDraft posts for a link
  6. og --helpList every command

Every option: og --help · docs ↗

Malware scan

ThreatCrush found no malware indicators in outreachgraph 0.26.5. The other findings below are ordinary code-review notes, not malware.

Scanned
2026-11-03 04:48 UTC · threatcrush 0.13.30
Files
910 (installer + github.com/profullstack/outreachgraph@d999e9a000bc)
Findings
3 critical · 6 high · 38 medium · 23 low
70 other findings (not malware)
  • critical
    SQL built from a template literal or f-stringsource/apps/api/src/content-radar.ts:1469sql-template-interpolation · CWE-89
  • critical
    SQL built from a template literal or f-stringsource/apps/api/src/workflows.ts:1669sql-template-interpolation · CWE-89
  • critical
    SQL built from a template literal or f-stringsource/apps/api/src/workflows.ts:1991sql-template-interpolation · CWE-89
  • high
    Database URL with credentialssource/.github/workflows/ci.yml:41secret-database-url · CWE-798
  • high
    Database URL with credentialssource/.github/workflows/ci.yml:73secret-database-url · CWE-798
  • high
    Database URL with credentialssource/.github/workflows/ci.yml:127secret-database-url · CWE-798
  • high
    outbound request to a non-constant URLsource/apps/server/src/index.ts:846js-ssrf-outbound-request · CWE-918
  • high
    outbound request to a non-constant URLsource/apps/server/src/index.ts:882js-ssrf-outbound-request · CWE-918
  • high
    TLS certificate verification disabledsource/packages/db/src/raw.ts:42tls-verification-disabled · CWE-295
  • medium
    SQL built from a template literal or f-stringsource/apps/api/src/app.ts:2706sql-template-interpolation · CWE-89
  • medium
    MAC or signature compared with ==source/apps/api/src/app.ts:5638js-timing-unsafe-mac-compare · CWE-208
  • medium
    MAC or signature compared with ==source/apps/api/src/campaigns.ts:615js-timing-unsafe-mac-compare · CWE-208
  • medium
    SQL built from a template literal or f-stringsource/apps/api/src/content-radar.ts:1248sql-template-interpolation · CWE-89
  • medium
    redirect to a non-constant destinationsource/apps/web/components/credit-packs.tsx:54js-open-redirect · CWE-601
  • medium
    unescaped HTML renderingsource/apps/web/components/pit-footer.tsx:22js-unescaped-html-sink · CWE-79
  • medium
    SQL built from a template literal or f-stringsource/packages/db/src/testing.ts:119sql-template-interpolation · CWE-89
  • medium
    SQL built from a template literal or f-stringsource/packages/db/src/testing.ts:136sql-template-interpolation · CWE-89
  • medium
    regex with nested unbounded quantifierssource/packages/domain/src/brain.ts:623redos-nested-quantifier · CWE-1333
  • medium
    regex with nested unbounded quantifierssource/packages/domain/src/brain.ts:625redos-nested-quantifier · CWE-1333
  • medium
    regex with nested unbounded quantifierssource/packages/domain/src/brain.ts:647redos-nested-quantifier · CWE-1333
  • medium
    SQL built from a template literal or f-stringsource/packages/pipeline/src/autopilot.ts:377sql-template-interpolation · CWE-89
  • medium
    MAC or signature compared with ==source/packages/pipeline/src/community-leads.ts:493js-timing-unsafe-mac-compare · CWE-208
  • medium
    SQL built from a template literal or f-stringsource/packages/pipeline/src/contact-import.ts:784sql-template-interpolation · CWE-89
  • medium
    SQL built from a template literal or f-stringsource/packages/pipeline/src/contact-import.ts:874sql-template-interpolation · CWE-89
  • medium
    SQL built from a template literal or f-stringsource/packages/pipeline/src/enrich-contact.ts:380sql-template-interpolation · CWE-89
  • medium
    SQL built from a template literal or f-stringsource/packages/pipeline/src/ideas.ts:231sql-template-interpolation · CWE-89
  • medium
    SQL built from a template literal or f-stringsource/packages/pipeline/src/ideas.ts:871sql-template-interpolation · CWE-89
  • medium
    SQL built from a template literal or f-stringsource/packages/pipeline/src/ideas.ts:905sql-template-interpolation · CWE-89
  • medium
    SQL built from a template literal or f-stringsource/packages/pipeline/src/ideas.ts:968sql-template-interpolation · CWE-89
  • medium
    SQL built from a template literal or f-stringsource/packages/pipeline/src/job-posts.ts:405sql-template-interpolation · CWE-89
  • medium
    SQL built from a template literal or f-stringsource/packages/pipeline/src/jobs.ts:393sql-template-interpolation · CWE-89
  • medium
    SQL built from a template literal or f-stringsource/packages/pipeline/src/sender-pool.ts:118sql-template-interpolation · CWE-89
  • medium
    SQL built from a template literal or f-stringsource/packages/pipeline/src/sender-pool.ts:133sql-template-interpolation · CWE-89
  • medium
    SQL built from a template literal or f-stringsource/packages/pipeline/src/sender-pool.ts:448sql-template-interpolation · CWE-89
  • medium
    SQL built from a template literal or f-stringsource/packages/pipeline/src/sender-pool.ts:599sql-template-interpolation · CWE-89
  • medium
    SQL built from a template literal or f-stringsource/packages/pipeline/src/webhook-store.ts:212sql-template-interpolation · CWE-89
  • medium
    SQL built from a template literal or f-stringsource/packages/pipeline/src/webhook-store.ts:221sql-template-interpolation · CWE-89
  • medium
    SQL built from a template literal or f-stringsource/packages/pipeline/src/webhook-store.ts:249sql-template-interpolation · CWE-89
  • medium
    SQL built from a template literal or f-stringsource/packages/pipeline/src/webhook-store.ts:287sql-template-interpolation · CWE-89
  • medium
    SQL built from a template literal or f-stringsource/packages/pipeline/src/webhook-store.ts:296sql-template-interpolation · CWE-89
  • medium
    SQL built from a template literal or f-stringsource/packages/pipeline/src/webhook-store.ts:322sql-template-interpolation · CWE-89
  • medium
    SQL built from a template literal or f-stringsource/packages/pipeline/src/webhook-store.ts:335sql-template-interpolation · CWE-89
  • medium
    SQL built from a template literal or f-stringsource/packages/pipeline/src/workspace-keys.ts:114sql-template-interpolation · CWE-89
  • medium
    regex with nested unbounded quantifierssource/packages/providers/src/email-finder/index.ts:50redos-nested-quantifier · CWE-1333
  • medium
    regex with nested unbounded quantifierssource/packages/providers/src/feeds/job-feeds.ts:144redos-nested-quantifier · CWE-1333
  • medium
    regex with nested unbounded quantifierssource/packages/providers/src/jobs/index.ts:342redos-nested-quantifier · CWE-1333
  • medium
    regex with nested unbounded quantifierssource/packages/providers/src/site/attribute.ts:332redos-nested-quantifier · CWE-1333
  • low
    SQL built from a template literal or f-stringsource/apps/api/src/app.test.ts:416sql-template-interpolation · CWE-89
  • low
    Hardcoded Credentialsource/apps/api/src/app.test.ts:873secret-generic-credential · CWE-798
  • low
    Hardcoded Credentialsource/apps/api/src/app.test.ts:1138secret-generic-credential · CWE-798
  • low
    Generic API Keysource/apps/api/src/coinpay-behind.test.ts:124secret-generic-api-key · CWE-798
  • low
    Generic API Keysource/apps/api/src/coinpay-behind.test.ts:181secret-generic-api-key · CWE-798
  • low
    Generic API Keysource/apps/api/src/coinpay-behind.test.ts:197secret-generic-api-key · CWE-798
  • low
    Generic API Keysource/apps/api/src/coinpay-behind.test.ts:212secret-generic-api-key · CWE-798
  • low
    Hardcoded Credentialsource/apps/api/src/throttle.test.ts:70secret-generic-credential · CWE-798
  • low
    Hardcoded Credentialsource/apps/api/src/throttle.test.ts:90secret-generic-credential · CWE-798
  • low
    Hardcoded Credentialsource/apps/cli/src/cli.test.ts:238secret-generic-credential · CWE-798
  • low
    Slack Webhook URLsource/apps/cli/src/cli.test.ts:243secret-slack-webhook · CWE-798
  • low
    Slack Webhook URLsource/apps/cli/src/cli.test.ts:249secret-slack-webhook · CWE-798
  • low
    Hardcoded Credentialsource/apps/mcp/src/mcp.test.ts:19secret-generic-credential · CWE-798
  • low
    Hardcoded Credentialsource/apps/mcp/src/mcp.test.ts:82secret-generic-credential · CWE-798
  • low
    dynamic code executionsource/apps/web/lib/sw-navigation.test.ts:75js-dynamic-code-execution · CWE-95
  • low
    Database URL with credentialssource/packages/db/src/raw.test.ts:6secret-database-url · CWE-798
  • low
    TLS certificate verification disabledsource/packages/db/src/raw.test.ts:7tls-verification-disabled · CWE-295
  • low
    Database URL with credentialssource/packages/db/src/raw.test.ts:12secret-database-url · CWE-798
  • low
    Database URL with credentialssource/packages/db/src/raw.test.ts:13secret-database-url · CWE-798
  • low
    Hardcoded Credentialsource/packages/email/src/mailer.test.ts:97secret-generic-credential · CWE-798
  • low
    Hardcoded Credentialsource/packages/pipeline/src/engagement.test.ts:141secret-generic-credential · CWE-798
  • low
    Hardcoded Credentialsource/packages/pipeline/src/opens.test.ts:104secret-generic-credential · CWE-798
  • low
    Slack Webhook URLsource/packages/pipeline/src/webhooks.test.ts:398secret-slack-webhook · CWE-798

Badge for your README

ThreatCrush: No malware found

[![ThreatCrush scan](https://w3bs.org/api/packages/outreachgraph.com/outreachgraph/badge.svg)](https://w3bs.org/packages/outreachgraph.com/outreachgraph)