skf-quick-skill
Warn
Audited by Socket on Oct 11, 2026
1 alert found:
AnomalyAnomalyreferences/resolve-target.md
LOWAnomalyLOW
references/resolve-target.md
This is workflow documentation, not a standalone malicious payload. It presents a plausible shell-injection weakness: user-controlled values are interpolated into shell commands, notably a heredoc that can be prematurely terminated by a crafted target. Risk depends on how the workflow engine performs interpolation and whether it validates inputs; use argument arrays or safely escaped input rather than constructing shell command strings.
Confidence: 91%Severity: 61%
Audit Metadata