agent-council
Audited by Socket on Jul 30, 2026
1 alert found:
SecurityNo explicit in-module malware behavior (e.g., network calls, encryption payloads, eval/Function-based execution) is visible in this fragment. However, this code is security-sensitive orchestration logic: it spawns detached workers and passes a config-derived '--command' to the worker, propagates the full process environment to those children, prints worker output/stderr to stdout, can SIGTERM PIDs read from disk, and can recursively delete job directories. The most realistic risk from this fragment is malicious or unintended command execution in the worker path and potential local sensitive data exposure via printed outputs and environment propagation; definitive malware confirmation requires reviewing the worker implementation and config parsing/validation not included here.