debugging-network-issues
Warn
Audited by Socket on Oct 5, 2026
1 alert found:
SecuritySecurityscripts/layered-isolation-probe.sh
MEDIUMSecurityMEDIUM
scripts/layered-isolation-probe.sh
The code is a legitimate layered CDN/origin diagnostic script, with no clear evidence of intentional malware, data theft, persistence, or obfuscation. However, it has a significant command-injection vulnerability because attacker-controlled environment variables are interpolated into strings executed with eval, and the SSH path introduces additional local and remote command-construction risk. Replace eval with Bash argument arrays, validate numeric and host inputs, and construct the SSH remote command without nested shell interpolation.
Confidence: 98%Severity: 72%
Audit Metadata