task-completion-loop
Warn
Audited by Socket on Oct 28, 2026
1 alert found:
AnomalyAnomalyevals/check_wait_rule.py
LOWAnomalyLOW
evals/check_wait_rule.py
This is a documentation test harness, with no evident credential theft, network communication, persistence, or destructive behavior. Its primary security concern is that a command copied from the Markdown file is executed through bash -c without safe parsing, so untrusted documentation could run arbitrary commands under the test process's privileges. Severity is moderate and depends on whether the input documentation is trusted; no malicious payload is evident in this fragment.
Confidence: 99%Severity: 55%
Audit Metadata