task-completion-loop

Warn

Audited by Socket on Oct 28, 2026

1 alert found:

Anomaly
AnomalyLOW
evals/check_wait_rule.py

This is a documentation test harness, with no evident credential theft, network communication, persistence, or destructive behavior. Its primary security concern is that a command copied from the Markdown file is executed through bash -c without safe parsing, so untrusted documentation could run arbitrary commands under the test process's privileges. Severity is moderate and depends on whether the input documentation is trusted; no malicious payload is evident in this fragment.

Confidence: 99%Severity: 55%
Audit Metadata
Analyzed At
Oct 28, 2026, 03:00 AM
Package URL
pkg:socket/skills-sh/adonis0123%2Fadonis-skills%2Ftask-completion-loop%2F@348f2f0f8fcdded515f14015e2226cdd69a5b84cf793ddb71956044bd360f3c6