skf-quick-skill

Warn

Audited by Socket on Oct 11, 2026

1 alert found:

Anomaly
AnomalyLOW
references/resolve-target.md

This is workflow documentation, not a standalone malicious payload. It presents a plausible shell-injection weakness: user-controlled values are interpolated into shell commands, notably a heredoc that can be prematurely terminated by a crafted target. Risk depends on how the workflow engine performs interpolation and whether it validates inputs; use argument arrays or safely escaped input rather than constructing shell command strings.

Confidence: 91%Severity: 61%
Audit Metadata
Analyzed At
Oct 11, 2026, 02:50 PM
Package URL
pkg:socket/skills-sh/armelhbobdad%2Fbmad-module-skill-forge%2Fskf-quick-skill%2F@1a9c07e00666b880a8d22a18e995f84228a5471bf47427fb9434bbc74d7633c1