context-continuity

Warn

Audited by Socket on May 19, 2026

1 alert found:

Anomaly
AnomalyLOW
scripts/install_auto_cycle_launchagent.sh

This fragment clearly establishes user-level persistence on macOS via a LaunchAgent configured with RunAtLoad=true and KeepAlive=true, repeatedly executing a local script under the user context and logging output to files. The snippet itself shows no network calls or direct credential/exfiltration actions, but it delegates execution to an external local script whose contents are not shown and it makes that script executable without integrity verification. Overall: moderate supply-chain risk driven by persistence + execution delegation; review and verify the target script and any subprocesses it runs before trusting the package.

Confidence: 62%Severity: 66%
Audit Metadata
Analyzed At
May 19, 2026, 04:06 PM
Package URL
pkg:socket/skills-sh/apexscaleai%2Fcodex-claude-skills%2Fcontext-continuity%2F@8c4fa716d6854c228c30985265001654a9f908c4
Security Audit — socket — context-continuity