process-compose-ops
Warn
Audited by Socket on Aug 15, 2026
1 alert found:
AnomalyAnomalyscripts/boot-task-install.template.ps1
LOWAnomalyLOW
scripts/boot-task-install.template.ps1
This file is a Windows Scheduled Task persistence installer for launching a local boot-start.ps1 via PowerShell at startup. The most security-significant traits are startup persistence, hidden window execution, and -ExecutionPolicy Bypass. The fragment contains no direct evidence of data theft, network exfiltration, or destructive behavior, but because it executes an external boot script at every boot under high privileges, the overall trustworthiness depends on the content of boot-start.ps1. Treat this as potentially risky until the referenced boot script and its dependencies are reviewed.
Confidence: 60%Severity: 65%
Audit Metadata