flow-generator

Warn

Audited by Socket on Sep 3, 2026

1 alert found:

Anomaly
AnomalyLOW
references/media.md

The fragment is legitimate operational documentation for image upload and flow configuration. It contains one material security issue: using `eval` to process CLI output creates a command-injection risk if output is not strictly trusted. Replace it with safe parsing and quoted variable assignment. The documented CDN upload and approved URL download are expected side effects, while duplicate uploads create asset-management risk rather than malware.

Confidence: 98%Severity: 56%
Audit Metadata
Analyzed At
Sep 3, 2026, 04:30 AM
Package URL
pkg:socket/skills-sh/adaptyteam%2Fadapty-skills%2Fflow-generator%2F@48ff176ff843c6a6807a8afcd5fe38d4096c226916570257a262db2340e304f8
Security Audit — socket — flow-generator