Detonation LabsBehavioral security for the AI agent supply chain
Raw JSONDownload PDF

Verdict

No malicious behavior observed

We ran it 8 times, with a normal setup, a GitHub Actions environment, cloud credentials present and PYTHON_COLORS set. It made no network connections. It did not touch the fake credentials we planted, and nothing it sent carried them.

0 findings. Scanned 25 Oct 2026 by detonator 0.5.1.

Target
pdf
Source
github
SHA-256
69e2ac9eb2bbe288
Files
12
RecommendationNo action needed

Nothing observed calls for action. This is evidence, not a guarantee.

Findings

No findings. Detonator observed no malicious or suspicious behavior in the runs below.

Exploration log

8 runs
  1. scripts:baseline ok · 0.4s

    no new behavior

  2. scripts:ci-github ok · 0.4s

    no new behavior

  3. scripts:cloud-creds ok · 0.4s

    no new behavior

  4. scripts:baseline ok · 0.4s

    no new behavior

  5. scripts:guided:PYTHON_COLORS ok · 0.4s

    no new behavior

  6. scripts:ci-github ok · 0.4s

    no new behavior

  7. scripts:baseline ok · 0.4s

    no new behavior

  8. scripts:guided:PYTHON_COLORS ok · 0.4s

    no new behavior

scripts/scripts/check_bounding_boxes.py: coverage plateau (2 runs with no new behavior); scripts/scripts/check_fillable_fields.py: coverage plateau (2 runs with no new behavior); scripts/scripts/convert_pdf_to_images.py: run budget spent; llm: run budget spent

Note

Observed behavior only. A clean result does not prove a package is safe. Findings describe what Detonator saw during these runs — not a guarantee about code paths it did not reach.