ugig.net/ugig · Packages

PACKAGES / Profullstack

ugig

CLI for ugig.net, a marketplace for AI-assisted engineers and skilled workers.

ThreatCrush · No malware found

INSTALLw3bs install ugig.net/ugig

No w3bs yet? curl -fsSL https://w3bs.org/install.sh | sh

Get started

What to type once it is installed.

w3bs install ugig.net/ugigInstall ugig and track it for updates
ugig loginLog in by approving this device in a browser
ugig auth whoamiCheck which account the CLI is using
ugig gigs list --search "<keyword>"Browse open gigs matching a keyword
ugig apply <gig-id> --cover-letter "<text>"Apply to a gig with a cover letter

Every option: ugig --help · docs ↗

Malware scan

ThreatCrush found no malware indicators in ugig 1.5.1. The other findings below are ordinary code-review notes, not malware.

Scanned: 2026-11-01 22:56 UTC · threatcrush 0.13.30
Files: 1462 (installer + github.com/profullstack/ugig.net)
Findings: 1 high · 12 medium · 53 low

66 other findings (not malware)

high
outbound request to a non-constant URLsource/scripts/scan-all-skills.ts:38js-ssrf-outbound-request · CWE-918
medium
redirect to a non-constant destinationsource/src/app/agent-login/AgentLoginForm.tsx:38js-open-redirect · CWE-601
medium
unescaped HTML renderingsource/src/app/blog/[slug]/page.tsx:80js-unescaped-html-sink · CWE-79
medium
redirect to a non-constant destinationsource/src/app/checkout/CheckoutClient.tsx:77js-open-redirect · CWE-601
medium
redirect to a non-constant destinationsource/src/app/dashboard/subscription/page.tsx:102js-open-redirect · CWE-601
medium
redirect to a non-constant destinationsource/src/app/dashboard/subscription/page.tsx:114js-open-redirect · CWE-601
medium
unescaped HTML renderingsource/src/app/page.tsx:70js-unescaped-html-sink · CWE-79
medium
unescaped HTML renderingsource/src/app/pricing/page.tsx:84js-unescaped-html-sink · CWE-79
medium
redirect to a non-constant destinationsource/src/components/funding/FundingClient.tsx:138js-open-redirect · CWE-601
medium
redirect to a non-constant destinationsource/src/components/gigs/BuyNowButton.tsx:120js-open-redirect · CWE-601
medium
unescaped HTML renderingsource/src/components/layout/PitFooter.tsx:25js-unescaped-html-sink · CWE-79
medium
dynamic code executionsource/src/lib/skills/metadata-extract.ts:300js-dynamic-code-execution · CWE-95
medium
dynamic code executionsource/src/lib/skills/security-scan.ts:48js-dynamic-code-execution · CWE-95
low
Hardcoded Credentialsource/cli/src/commands/auth.test.ts:66secret-generic-credential · CWE-798
low
Hardcoded Credentialsource/cli/src/commands/auth.test.ts:85secret-generic-credential · CWE-798
low
Hardcoded Credentialsource/cli/src/commands/webhooks.test.ts:60secret-generic-credential · CWE-798
low
Hardcoded Credentialsource/cli/src/commands/webhooks.test.ts:72secret-generic-credential · CWE-798
low
Hardcoded Credentialsource/cli/src/commands/webhooks.test.ts:109secret-generic-credential · CWE-798
low
Hardcoded Credentialsource/cli/src/commands/webhooks.test.ts:112secret-generic-credential · CWE-798
low
Generic API Keysource/docs/agents/integration-guide.md:893secret-generic-api-key · CWE-798
low
Hardcoded Credentialsource/src/app/api/auth/agent-register/route.test.ts:27secret-generic-credential · CWE-798
low
Hardcoded Credentialsource/src/app/api/auth/login/route.test.ts:53secret-generic-credential · CWE-798
low
Hardcoded Credentialsource/src/app/api/auth/login/route.test.ts:68secret-generic-credential · CWE-798
low
Hardcoded Credentialsource/src/app/api/auth/login/route.test.ts:87secret-generic-credential · CWE-798
low
Hardcoded Credentialsource/src/app/api/auth/signup/route.test.ts:172secret-generic-credential · CWE-798
low
Hardcoded Credentialsource/src/app/api/auth/signup/route.test.ts:196secret-generic-credential · CWE-798
low
Hardcoded Credentialsource/src/app/api/auth/signup/route.test.ts:215secret-generic-credential · CWE-798
low
Hardcoded Credentialsource/src/app/api/auth/signup/route.test.ts:228secret-generic-credential · CWE-798
low
Hardcoded Credentialsource/src/app/api/auth/signup/route.test.ts:267secret-generic-credential · CWE-798
low
Hardcoded Credentialsource/src/app/api/auth/signup/route.test.ts:297secret-generic-credential · CWE-798
low
Hardcoded Credentialsource/src/app/api/auth/signup/route.test.ts:329secret-generic-credential · CWE-798
low
Hardcoded Credentialsource/src/app/api/auth/signup/route.test.ts:346secret-generic-credential · CWE-798
low
Hardcoded Credentialsource/src/app/api/gigs/[id]/buy/route.test.ts:46secret-generic-credential · CWE-798
low
Hardcoded Credentialsource/src/app/api/gigs/[id]/buy/route.test.ts:118secret-generic-credential · CWE-798
low
Hardcoded Credentialsource/src/app/api/gigs/[id]/buy/route.test.ts:177secret-generic-credential · CWE-798
low
Hardcoded Credentialsource/src/app/api/orders/[id]/release/route.test.ts:18secret-generic-credential · CWE-798
low
dynamic code executionsource/src/app/api/skills/[slug]/scan/route.test.ts:212js-dynamic-code-execution · CWE-95
low
dynamic code executionsource/src/app/api/skills/[slug]/scan/route.test.ts:223js-dynamic-code-execution · CWE-95
low
dynamic code executionsource/src/app/api/skills/[slug]/scan/route.test.ts:239js-dynamic-code-execution · CWE-95
low
Hardcoded Credentialsource/src/lib/api.test.ts:126secret-generic-credential · CWE-798
low
Hardcoded Credentialsource/src/lib/api.test.ts:131secret-generic-credential · CWE-798
low
Hardcoded Credentialsource/src/lib/coinpay-oauth.test.ts:20secret-generic-credential · CWE-798
low
dynamic code executionsource/src/lib/skills/composite-scanner.test.ts:106js-dynamic-code-execution · CWE-95
low
dynamic code executionsource/src/lib/skills/secureclaw-scanner.test.ts:36js-dynamic-code-execution · CWE-95
low
dynamic code executionsource/src/lib/skills/secureclaw-scanner.test.ts:44js-dynamic-code-execution · CWE-95
low
dynamic code executionsource/src/lib/skills/secureclaw-scanner.test.ts:66js-dynamic-code-execution · CWE-95
low
dynamic code executionsource/src/lib/skills/secureclaw-scanner.test.ts:81js-dynamic-code-execution · CWE-95
low
dynamic code executionsource/src/lib/skills/secureclaw-scanner.test.ts:94js-dynamic-code-execution · CWE-95
low
dynamic code executionsource/src/lib/skills/secureclaw-scanner.test.ts:103js-dynamic-code-execution · CWE-95
low
dynamic code executionsource/src/lib/skills/secureclaw-scanner.test.ts:118js-dynamic-code-execution · CWE-95
low
dynamic code executionsource/src/lib/skills/secureclaw-scanner.test.ts:144js-dynamic-code-execution · CWE-95
low
dynamic code executionsource/src/lib/skills/secureclaw-scanner.test.ts:162js-dynamic-code-execution · CWE-95
low
dynamic code executionsource/src/lib/skills/security-scan.test.ts:28js-dynamic-code-execution · CWE-95
low
dynamic code executionsource/src/lib/skills/url-import.test.ts:178js-dynamic-code-execution · CWE-95
low
dynamic code executionsource/src/lib/skills/url-import.test.ts:191js-dynamic-code-execution · CWE-95
low
JSON Web Tokensource/src/lib/supabase/service.test.ts:16secret-jwt · CWE-798
low
JSON Web Tokensource/src/lib/supabase/service.test.ts:40secret-jwt · CWE-798
low
Hardcoded Credentialsource/src/lib/validations.test.ts:148secret-generic-credential · CWE-798
low
Hardcoded Credentialsource/src/lib/validations.test.ts:512secret-generic-credential · CWE-798
low
Hardcoded Credentialsource/src/lib/validations.test.ts:523secret-generic-credential · CWE-798
low
Hardcoded Credentialsource/src/lib/validations.test.ts:538secret-generic-credential · CWE-798
low
Hardcoded Credentialsource/src/lib/validations.test.ts:548secret-generic-credential · CWE-798
low
Hardcoded Credentialsource/src/lib/validations.test.ts:557secret-generic-credential · CWE-798
low
Hardcoded Credentialsource/src/lib/validations.test.ts:567secret-generic-credential · CWE-798
low
Hardcoded Credentialsource/src/lib/validations.test.ts:582secret-generic-credential · CWE-798
low
Hardcoded Credentialsource/src/lib/webhooks/supabase-store.test.ts:11secret-generic-credential · CWE-798

Badge for your README

[![ThreatCrush scan](https://w3bs.org/api/packages/ugig.net/ugig/badge.svg)](https://w3bs.org/packages/ugig.net/ugig)