marketplace-audit

This module is a local audit/consistency checker with an optional auto-fix mode. No direct malware behavior is present (no network/exfiltration or dynamic code execution). However, the highest security concern is integrity and potential out-of-scope filesystem modification: file paths used for reads/writes are derived from marketplace.json-controlled strings without robust path normalization/sandboxing. If an attacker can influence marketplace.json and the tool is run with --fix, it may read and potentially overwrite files outside the intended repository area. Subprocess usage is limited to a fixed git query and is comparatively low risk.