ThreatCrush · No malware found
INSTALL
w3bs install profullstack.com/summary-forgeNo w3bs yet? curl -fsSL https://w3bs.org/install.sh | sh
Get started
What to type once it is installed.
w3bs install profullstack.com/summary-forgeInstall summary-forge and track it for updatessummary setupEnter API keys and settings interactively (OpenAI key required)summary file <path/to/book.pdf>Summarize a local PDF or EPUBsummary url <url>Summarize a web page or articlesummary interactiveOpen the guided interactive mode
Every option: summary --help · docs ↗
Malware scan
ThreatCrush found no malware indicators in summary-forge 1.10.2. The other findings below are ordinary code-review notes, not malware.
- Scanned
- 2026-11-01 22:56 UTC · threatcrush 0.13.30
- Files
- 80 (installer + github.com/profullstack/summary-forge-module)
- Findings
- 13 medium · 2 low
15 other findings (not malware)
- mediumHigh-entropy Hex Token
source/CLOUDFLARE_2CAPTCHA_INTEGRATION.md:50secret-hex-token · CWE-798 - mediumcredential read from the environment into a log sink
source/index.js:248js-credential-logged · CWE-532 - mediumpredictable randomness used for a security value
source/src/summary-forge.js:804insecure-randomness-for-secret · CWE-338 - mediumdynamic code execution
source/src/summary-forge.js:911js-dynamic-code-execution · CWE-95 - mediumpredictable randomness used for a security value
source/src/summary-forge.js:1079insecure-randomness-for-secret · CWE-338 - mediumpredictable randomness used for a security value
source/src/summary-forge.js:1372insecure-randomness-for-secret · CWE-338 - mediumpredictable randomness used for a security value
source/src/summary-forge.js:1787insecure-randomness-for-secret · CWE-338 - mediumpredictable randomness used for a security value
source/src/summary-forge.js:2071insecure-randomness-for-secret · CWE-338 - mediumdynamic code execution
source/src/summary-forge.js:2225js-dynamic-code-execution · CWE-95 - mediumdynamic code execution
source/src/summary-forge.js:2277js-dynamic-code-execution · CWE-95 - mediumdynamic code execution
source/src/summary-forge.js:2313js-dynamic-code-execution · CWE-95 - mediumpredictable randomness used for a security value
source/src/utils/web-page.js:138insecure-randomness-for-secret · CWE-338 - mediumpredictable randomness used for a security value
source/test-webshare-auth.js:23insecure-randomness-for-secret · CWE-338 - lowpredictable randomness used for a security value
source/test/proxy-auth.test.js:50insecure-randomness-for-secret · CWE-338 - lowpredictable randomness used for a security value
source/test/web-page-utils.test.js:146insecure-randomness-for-secret · CWE-338
Badge for your README
[](https://w3bs.org/packages/profullstack.com/summary-forge)