context-continuity
Warn
Audited by Socket on May 19, 2026
1 alert found:
AnomalyAnomalyscripts/install_auto_cycle_launchagent.sh
LOWAnomalyLOW
scripts/install_auto_cycle_launchagent.sh
This fragment clearly establishes user-level persistence on macOS via a LaunchAgent configured with RunAtLoad=true and KeepAlive=true, repeatedly executing a local script under the user context and logging output to files. The snippet itself shows no network calls or direct credential/exfiltration actions, but it delegates execution to an external local script whose contents are not shown and it makes that script executable without integrity verification. Overall: moderate supply-chain risk driven by persistence + execution delegation; review and verify the target script and any subprocesses it runs before trusting the package.
Confidence: 62%Severity: 66%
Audit Metadata