ask-ui

Warn

Audited by Socket on Aug 17, 2026

1 alert found:

Anomaly
AnomalyLOW
scripts/adapters/process-utils.mjs

This code fragment is a generic but security-sensitive process execution helper. It can execute external binaries/scripts supplied or indirectly influenced by callers/environment, and on Windows it explicitly runs PowerShell scripts with '-ExecutionPolicy Bypass' and may use shell execution for '.cmd' targets. No overt malware behaviors (exfiltration/persistence) are present in this fragment, but the execution capabilities warrant strict input validation and hardening in any calling code to prevent unintended command/script execution.

Confidence: 68%Severity: 60%
Audit Metadata
Analyzed At
Aug 17, 2026, 02:21 AM
Package URL
pkg:socket/skills-sh/angus221%2Fak.skills_sample%2Fask-ui%2F@623f6a9f9840e17d5512dfc536af41887fbb3f830d6681a189524babe3f8ed7e
Security Audit — socket — ask-ui