debugging-network-issues

Warn

Audited by Socket on Oct 5, 2026

1 alert found:

Security
SecurityMEDIUM
scripts/layered-isolation-probe.sh

The code is a legitimate layered CDN/origin diagnostic script, with no clear evidence of intentional malware, data theft, persistence, or obfuscation. However, it has a significant command-injection vulnerability because attacker-controlled environment variables are interpolated into strings executed with eval, and the SSH path introduces additional local and remote command-construction risk. Replace eval with Bash argument arrays, validate numeric and host inputs, and construct the SSH remote command without nested shell interpolation.

Confidence: 98%Severity: 72%
Audit Metadata
Analyzed At
Oct 5, 2026, 03:06 AM
Package URL
pkg:socket/skills-sh/daymade%2Fclaude-code-skills%2Fdebugging-network-issues%2F@822c439cc259521c6b6ee453001ca48a9fa2c49f1f7915bf9cbfb9b414faebef