alterlab-deeptools
Warn
Audited by Socket on Sep 25, 2026
1 alert found:
AnomalyAnomalyscripts/workflow_generator.py
LOWAnomalyLOW
scripts/workflow_generator.py
No evidence of intentional malware, data theft, backdoor behavior, or suspicious external communication is present. The primary security issue is command injection in generated Bash scripts because command-line parameters are inserted without shell escaping or strict validation. The fragment is also syntactically incomplete and likely will not execute as supplied. Inputs should be safely quoted, preferably passed through robust shell-quoting such as shlex.quote, and array arguments should be constructed without interpolating raw user text.
Confidence: 98%Severity: 68%
Audit Metadata