agent-council

Warn

Audited by Socket on Jul 30, 2026

1 alert found:

Security
SecurityMEDIUM
scripts/council-job.js

No explicit in-module malware behavior (e.g., network calls, encryption payloads, eval/Function-based execution) is visible in this fragment. However, this code is security-sensitive orchestration logic: it spawns detached workers and passes a config-derived '--command' to the worker, propagates the full process environment to those children, prints worker output/stderr to stdout, can SIGTERM PIDs read from disk, and can recursively delete job directories. The most realistic risk from this fragment is malicious or unintended command execution in the worker path and potential local sensitive data exposure via printed outputs and environment propagation; definitive malware confirmation requires reviewing the worker implementation and config parsing/validation not included here.

Confidence: 56%Severity: 70%
Audit Metadata
Analyzed At
Jul 30, 2026, 04:12 PM
Package URL
pkg:socket/skills-sh/0xwilliamortiz%2Fagents-council%2Fagent-council%2F@633f7a84520b58c8963a5e1e3246b970dd879918215ac377268cddb3183c099d
Security Audit — socket — agent-council