hivemind
Warn
Audited by Socket on Oct 24, 2026
1 alert found:
AnomalyAnomalyscripts/oc-status.mjs
LOWAnomalyLOW
scripts/oc-status.mjs
The code is a run-log summarizer with no evidence of malware, exfiltration, persistence, or command execution. It contains a moderate path traversal and local file disclosure risk because command-line identifiers are not constrained to safe filenames before constructing paths. Validate identifiers as basenames or resolve and verify that the resulting path remains inside RUNS_DIR. Treat log fields as untrusted if terminal output is security-sensitive.
Confidence: 98%Severity: 55%
Audit Metadata