hivemind

Warn

Audited by Socket on Oct 24, 2026

1 alert found:

Anomaly
AnomalyLOW
scripts/oc-status.mjs

The code is a run-log summarizer with no evidence of malware, exfiltration, persistence, or command execution. It contains a moderate path traversal and local file disclosure risk because command-line identifiers are not constrained to safe filenames before constructing paths. Validate identifiers as basenames or resolve and verify that the resulting path remains inside RUNS_DIR. Treat log fields as untrusted if terminal output is security-sensitive.

Confidence: 98%Severity: 55%
Audit Metadata
Analyzed At
Oct 24, 2026, 03:25 AM
Package URL
pkg:socket/skills-sh/alirezarezvani%2Fclaude-skills%2Fhivemind%2F@660721df1cfe13be76ea3fb9ec035b605461fc5c0be789d064f2bc498c48160d