{
  "rule_ids": [
    "curl_pipe_shell"
  ],
  "severity": "HIGH",
  "command_redacted": "# Check if minimax-m3-free is actually usable (just check the model exists in th...",
  "findings": [
    {
      "rule_id": "curl_pipe_shell",
      "severity": "HIGH",
      "title": "Pipe to interpreter: curl | python3",
      "description": "Command pipes output from 'curl' directly to interpreter 'python3'. Downloaded content will be executed without inspection.\n  Safer: tirith run https://opencode.ai/zen/v1/models  — or: vet https://opencode.ai/zen/v1/models  (https://getvet.sh)",
      "evidence": [
        {
          "type": "command_pattern",
          "pattern": "pipe to interpreter",
          "matched": "curl -s https://opencode.ai/zen/v1/models 2>/dev/null | python3 -c \"\nimport sys, json\nd = json.load(sys.stdin)\nfor m in d.get('data', []):\n    if 'm3' in m['id'].lower() or 'minimax-m3' in m['id'].lower():\n        print(json.dumps(m, indent=[REDACTED]\n\""
        },
        {
          "type": "url",
          "raw": "https://opencode.ai/zen/v1/models"
        }
      ],
      "mitre_id": "T1059.004"
    }
  ],
  "timestamp": "2026-06-11T14:34:12.722596292+00:00"
}