litbase
Warn
Audited by Socket on Sep 23, 2026
1 alert found:
AnomalyAnomalycore/settings.local.json
LOWAnomalyLOW
core/settings.local.json
The fragment is a permissive command-authorization configuration, not malware by itself. It contains no hardcoded secrets, obfuscation, persistence, exfiltration logic, or executed commands. However, unrestricted curl and Python permissions combined with file-write and chmod capabilities create a significant defense-in-depth risk if untrusted input can trigger these tools. Restrict commands, destinations, paths, and script sources where possible.
Confidence: 98%Severity: 62%
Audit Metadata