eks-well-architected-review
Warn
Audited by Socket on Oct 13, 2026
1 alert found:
AnomalyAnomalyassets/score.sh
LOWAnomalyLOW
assets/score.sh
This fragment is an execution wrapper whose main security risk is running a Bash block taken from SRC after only a weak emit() presence check. If SRC is trusted and controlled, the behavior may be an intended scorer workflow; if SRC can be modified by an untrusted party, it can provide arbitrary commands for execution. No specific malicious payload is visible in this fragment.
Confidence: 98%Severity: 65%
Audit Metadata