whatsapp-utils-hardened

Warn

Audited by Socket on Apr 21, 2026

1 alert found:

Anomaly
AnomalyLOW
scripts/utils.js

No clear indicators of intentional malware (no network exfiltration, no persistence, no code execution capabilities) are present in this single file. However, it directly reads and exports sensitive personal contact data from a local WhatsApp contacts.json and prints it to stdout, and it can reveal credential-cache inventory metadata. This creates a meaningful privacy/data-leak risk if the CLI is run in environments where stdout is captured (logs/CI) or if upstream tooling misuses these outputs. Review intended use and ensure logging/outputs are controlled.

Confidence: 70%Severity: 55%
Audit Metadata
Analyzed At
Apr 21, 2026, 06:36 PM
Package URL
pkg:socket/skills-sh/faberlens%2Fhardened-skills%2Fwhatsapp-utils-hardened%2F@ab3a16ddede043c380804f14bd4d94b7d2c54265
Security Audit — socket — whatsapp-utils-hardened