memory-harness
Warn
Audited by Socket on Apr 20, 2026
1 alert found:
AnomalyAnomalyreplay-trace.sh
LOWAnomalyLOW
replay-trace.sh
This Bash wrapper appears to be a legitimate replay/logging utility, with no direct evidence of malicious logic (no networking, credential theft, persistence, or obfuscated code). The primary security concerns are operational/supply-chain: it executes an environment-controlled binary via DO_MEMORY_CLI and forwards untrusted trace content into external CLI arguments, which can be dangerous depending on downstream do-memory-cli behavior. Additional concerns include suppressed stderr/ignored failures and writing an output file derived from the provided trace filename without sanitization.
Confidence: 62%Severity: 56%
Audit Metadata