litbase

Warn

Audited by Socket on Sep 23, 2026

1 alert found:

Anomaly
AnomalyLOW
core/settings.local.json

The fragment is a permissive command-authorization configuration, not malware by itself. It contains no hardcoded secrets, obfuscation, persistence, exfiltration logic, or executed commands. However, unrestricted curl and Python permissions combined with file-write and chmod capabilities create a significant defense-in-depth risk if untrusted input can trigger these tools. Restrict commands, destinations, paths, and script sources where possible.

Confidence: 98%Severity: 62%
Audit Metadata
Analyzed At
Sep 23, 2026, 04:45 PM
Package URL
pkg:socket/skills-sh/aipoch%2Fmedical-research-skills%2Flitbase%2F@a05eb5ec83c3e45934b114726f68f453fa8361a6008455f83cb4acd61b28dc36