byted-ark-evolve
Warn
Audited by Socket on Sep 21, 2026
1 alert found:
AnomalyAnomalyscripts/apply-proposal.py
LOWAnomalyLOW
scripts/apply-proposal.py
This is an evolution/proposal application utility with legitimate file-editing and Git-commit behavior. It does not show clear malware indicators or exfiltration. However, the missing path containment validation creates a significant file-modification risk if an attacker can control the database or command inputs: absolute paths or ../ traversal may allow writes and Git staging outside the intended workspace. The supplied code also cannot run because of the malformed SQL execution call. Repair the syntax error, validate that resolved target paths remain beneath workspace_root, restrict database and workspace locations, and review proposal authorization before applying mutations.
Confidence: 99%Severity: 68%
Audit Metadata