agent-ready-nextjs
Warn
Audited by Socket on Oct 9, 2026
1 alert found:
SecuritySecurityscripts/scaffold.mjs
MEDIUMSecurityMEDIUM
scripts/scaffold.mjs
No direct malware behavior is evident. The generator has a path traversal risk through features.sectionLlmsTxt that can write outside the target directory, and untrusted configuration may inject code into generated source files. Use only trusted configuration and validate section paths and escaped generated values.
Confidence: 98%Severity: 72%
Audit Metadata