factory-conductor

Warn

Audited by Socket on Nov 1, 2026

1 alert found:

Anomaly
AnomalyLOW
assets/reentry_timer.py

This is a scheduler-management module with no evident malware behavior. It creates persistent scheduled tasks as its intended function. However, run_id is not validated before use in filesystem paths and configuration text; untrusted values could enable path traversal, unintended file deletion or writing, and cron/systemd configuration injection. The risk depends on whether callers permit untrusted run_id values.

Confidence: 96%Severity: 66%
Audit Metadata
Analyzed At
Nov 1, 2026, 10:15 AM
Package URL
pkg:socket/skills-sh/dhanesh%2Fagent-skills%2Ffactory-conductor%2F@bb8be3ecd009c4dc1337c845a967ed8355d80c4563885083b019e4ad20ce251b