process-compose-ops

Warn

Audited by Socket on Aug 15, 2026

1 alert found:

Anomaly
AnomalyLOW
scripts/boot-task-install.template.ps1

This file is a Windows Scheduled Task persistence installer for launching a local boot-start.ps1 via PowerShell at startup. The most security-significant traits are startup persistence, hidden window execution, and -ExecutionPolicy Bypass. The fragment contains no direct evidence of data theft, network exfiltration, or destructive behavior, but because it executes an external boot script at every boot under high privileges, the overall trustworthiness depends on the content of boot-start.ps1. Treat this as potentially risky until the referenced boot script and its dependencies are reviewed.

Confidence: 60%Severity: 65%
Audit Metadata
Analyzed At
Aug 15, 2026, 09:43 PM
Package URL
pkg:socket/skills-sh/0xdarkmatter%2Fclaude-mods%2Fprocess-compose-ops%2F@9c92af2ad2c241739bc4eeaa0e3fded8718f4c9cfaf1efd55532d1daa42fef64
Security Audit — socket — process-compose-ops