batch-cohort

Warn

Audited by Socket on Sep 17, 2026

1 alert found:

Anomaly
AnomalyLOW
references/batch_template_generator.R

The code is a legitimate batch analysis generator and contains no evident malware, exfiltration, backdoor, or obfuscated payload. However, it treats the template and CSV as trusted while directly embedding their contents into executable R scripts and filesystem paths. If either input can be modified by an untrusted party, this permits arbitrary code execution when execute/full mode is used and possible path traversal or unintended file writes. Inputs should be validated, values safely quoted or passed as data rather than source text, and generated scripts should not be executed without an explicit trust boundary.

Confidence: 98%Severity: 68%
Audit Metadata
Analyzed At
Sep 17, 2026, 02:00 AM
Package URL
pkg:socket/skills-sh/aperivue%2Fmedsci-skills%2Fbatch-cohort%2F@8076d3db089167240d3f6884af0d14e4390be9e149eaa35f3d424e6e3466a58d
Security Audit — socket — batch-cohort