playrote.play.v1

ssakshamsai26/security-sensitive-change-scoutv0.2.2Public

Security sensitive change scout

Security review is most useful when it points humans toward a changed trust boundary, not when it pretends static text can find every vulnerability.

Read the full description

Security Sensitive Change Scout reads one local Git range, classifies changed paths and diff context for authorization, authentication, uploads, secrets-shaped configuration, cryptography, CORS, dependencies, and externally reachable boundaries, and produces evidence-linked questions for a reviewer. Findings mean additional attention is warranted; they are not exploit findings, compliance approval, or proof a path is safe. It never prints secret values, executes project code, calls security scanners or services, changes Git state, or applies a fix. Unseen generated code, runtime routing, deployment policy, and external controls are reported as outside the evidence boundary.

  • Published 4 Sep 2026
  • Download 1
  • Needs rote 0.62.0+
  • Digest sha256:678b8fefb1bb…
  • Reference sakshamsai26/security-sensitive-change-scout@0.2.2

Before you run it1 local tool

Everything here is checked on your machine when rote inspects the play. This page never learns what you have installed or which credentials you hold.

  • ○
    python3local tool

    Must be on your PATH when used. minimum version undeclared.

Inputs2, all required

rote asks for these before running and shows the defaults it will use.

  • Rootroot

    Absolute path to a local Git repository you are authorized to inspect. Read-only; no remote contact, Git writes, or project commands.

    requiredstringcustom value allowed
  • Change rangechange_range

    Existing local Git range, for example HEAD~10..HEAD. Invalid or unavailable ranges are reported as UNKNOWN.

    requiredstringcustom value allowed

What it changes

No write operations are declared in this version's manifest.

Credentials remain in the recipient's local rote vault; this page and the publisher never receive them.

Runtime details
  • rote CLIversion 0.62.0 or newer
  • Servicesnone declared
  • Digestsha256:678b8fefb1bbdadb5442f397d3e3602bad146cb3f50d94d0e9e8110967a843b7
  • Archive size3993 bytes
  • Published2026-09-04T09:40:07.503078+00:00
  • Published withrote 0.77.0

Credential values and current readiness remain local. Opening this page never prompts for a credential, opens an authorization browser, or calls a service this play uses.

A play is a published, versioned automation package that runs on your own machine through rote, a free command-line tool. Opening this page installs nothing and runs nothing.