server-hardening

Warn

Audited by Socket on Sep 28, 2026

1 alert found:

Anomaly
AnomalyLOW
scripts/verify.sh

The script is primarily a system-hardening verification utility, but it has a command-injection vulnerability through the caller-supplied port arguments. Validate each argument as digits and use a safer connection-checking method that does not interpolate input into a shell command string.

Confidence: 99%Severity: 68%
Audit Metadata
Analyzed At
Sep 28, 2026, 07:23 PM
Package URL
pkg:socket/skills-sh/donnfelker%2Fkamal-skills%2Fserver-hardening%2F@dcdb4de2b52cc522c9fc4b68a1c8932ba6e985869d8182482a3b6f09334cd173