memory-harness

Warn

Audited by Socket on Apr 20, 2026

1 alert found:

Anomaly
AnomalyLOW
replay-trace.sh

This Bash wrapper appears to be a legitimate replay/logging utility, with no direct evidence of malicious logic (no networking, credential theft, persistence, or obfuscated code). The primary security concerns are operational/supply-chain: it executes an environment-controlled binary via DO_MEMORY_CLI and forwards untrusted trace content into external CLI arguments, which can be dangerous depending on downstream do-memory-cli behavior. Additional concerns include suppressed stderr/ignored failures and writing an output file derived from the provided trace filename without sanitization.

Confidence: 62%Severity: 56%
Audit Metadata
Analyzed At
Apr 20, 2026, 07:01 PM
Package URL
pkg:socket/skills-sh/d-o-hub%2Frust-self-learning-memory%2Fmemory-harness%2F@fa3af2283d0eccf73b0b0413924673da565c4159