R020 · script-security
Bundled scripts free of dangerous patterns
- Code: R020
- Slug:
script-security - Tier: heuristic
- Default severity: warning
- Packages: minimal, recommended, strict
- Locked: Yes (safety: cannot be disabled or demoted)
- Doc: https://doraval.dev/reference/rules/R020
| What | Scans bundled scripts/ for dangerous network and secret-prompt patterns. Locked (safety). |
| Why | Scripts run with the user’s permissions. Locked so a package cannot suppress security warnings. |
How to fix
Remove the dangerous operation when possible. If you must keep it, narrow scope, validate input, and make the risk explicit in the skill body.