context-continuity
Warn
Audited by Socket on Sep 20, 2026
1 alert found:
AnomalyAnomalyscripts/install_auto_cycle_launchagent.sh
LOWAnomalyLOW
scripts/install_auto_cycle_launchagent.sh
The fragment is an installer for a persistent macOS LaunchAgent. It is not inherently malware based on the supplied code and contains no direct data exfiltration, credential theft, destructive behavior, or obfuscation. However, it creates automatic, self-restarting execution of an external Bash script and immediately activates it; the security impact depends substantially on that script's contents and integrity. The hardcoded /Users/leo repository path is also a portability and configuration concern.
Confidence: 98%Severity: 58%
Audit Metadata