test-safety-net

Warn

Audited by Socket on Nov 1, 2026

2 alerts found:

Anomalyx2
AnomalyLOW
assets/test_stack_node.py

This is a readable test suite, not apparent malware. It exposes and tests a meaningful execution risk: precise discovery executes the selected TypeScript library, which may be controlled by the analyzed repository or TSN_TYPESCRIPT_LIB. Use --no-precise when analyzing untrusted repositories unless that compiler is trusted or execution is sandboxed.

Confidence: 98%Severity: 58%
AnomalyLOW
references/parameters.md

The supplied text documents a repository-ranking tool rather than providing its source code. It identifies a material execution risk: Node precise discovery executes repository-controlled TypeScript through require. Use --no-precise when analyzing untrusted Node repositories. No other malicious behavior can be established from this documentation alone.

Confidence: 97%Severity: 67%
Audit Metadata
Analyzed At
Nov 1, 2026, 10:18 AM
Package URL
pkg:socket/skills-sh/dhanesh%2Fagent-skills%2Ftest-safety-net%2F@e9f334bdac2e1e01d49a6886c54d3df1e06e2ce31dd728d6448503878f3385b7