pueue-job-queue

Warn

Audited by Socket on Oct 30, 2026

1 alert found:

Anomaly
AnomalyLOW
scripts/submit-dag.py

This is a DAG submission utility, not evident malware: it reads and validates a task specification and submits its commands to pueue. A specification's `cmd` values are intentionally executed, so only use trusted specifications; the script can also create groups or alter pueue parallelism. No network exfiltration, credential theft, or obfuscation is present. As provided, the undefined `epilog` name causes a NameError when argument parsing is initialized; severity is high for untrusted task specifications and low for trusted use.

Confidence: 99%Severity: 62%
Audit Metadata
Analyzed At
Oct 30, 2026, 11:25 AM
Package URL
pkg:socket/skills-sh/daviddwlee84%2Fagent-skills%2Fpueue-job-queue%2F@cdde16a1f78ff7162d5bbb3b74b5e53dafd234755d0a8a480868ffcd1b421b98