android-emulator

Warn

Audited by Socket on May 7, 2026

1 alert found:

Anomaly
AnomalyLOW
tests/stubs/convert

This fragment is a deliberately stubbed `convert` that spoofs `--version`, logs all provided arguments to a configurable location, and truncates/creates the last argument as a filesystem path. While it shows no direct network exfiltration or obvious malware capabilities, it introduces meaningful security risk through potential arbitrary file overwrite/truncation (caller-controlled path) and possible leakage of sensitive invocation arguments into logs. In a supply-chain context, such a stub can also sabotage expected build/runtime behavior if substituted for the real dependency.

Confidence: 72%Severity: 64%
Audit Metadata
Analyzed At
May 7, 2026, 08:25 PM
Package URL
pkg:socket/skills-sh/chunkytofustudios%2Fflutter-skills%2Fandroid-emulator%2F@b6dd76319533233c8ba2610b28a4644d5ae4a83b