factory-conductor
Warn
Audited by Socket on Nov 1, 2026
1 alert found:
AnomalyAnomalyassets/reentry_timer.py
LOWAnomalyLOW
assets/reentry_timer.py
This is a scheduler-management module with no evident malware behavior. It creates persistent scheduled tasks as its intended function. However, run_id is not validated before use in filesystem paths and configuration text; untrusted values could enable path traversal, unintended file deletion or writing, and cron/systemd configuration injection. The risk depends on whether callers permit untrusted run_id values.
Confidence: 96%Severity: 66%
Audit Metadata