deeptools
Warn
Audited by Socket on Sep 17, 2026
1 alert found:
AnomalyAnomalyscripts/workflow_generator.py
LOWAnomalyLOW
scripts/workflow_generator.py
No clear evidence of intentional malware, backdoors, or data exfiltration in this module. The primary security concern is that it generates Bash scripts by directly interpolating untrusted CLI parameters into shell syntax and later instructs execution, creating a plausible command-injection/argument-injection risk if inputs are not fully trusted or are attacker-influenced. Additionally, the provided snippet appears truncated/internally inconsistent, lowering confidence in exact runtime behavior, though the injection risk remains inherent in the shown f-string templating approach.
Confidence: 66%Severity: 55%
Audit Metadata