helixar-ai/Unpinched — PinchTab Detector
Detect PinchTab deployment and unauthenticated CDP bridge exposure. Fail CI builds on agentic browser hijacking artifacts.
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Stale
- License
- None
Inputs
| name | description | required | default |
|---|---|---|---|
| version | Release version to download (e.g. v0.1.0). Defaults to latest. | no | latest |
| fail-on-findings | Fail the workflow step if any PinchTab indicators are found (risk level != NONE). | no | true |
| timeout | HTTP request timeout in seconds for port and CDP probes. | no | 3 |
| ports | Comma-separated additional ports to scan beyond defaults. | no | "" |
Outputs
| name | description |
|---|---|
| risk-level | Overall risk level: NONE | LOW | MEDIUM | HIGH | CRITICAL |
| findings | Full scan report as a JSON string. |