service-omni-presence-user-config-deploy
Audited by Socket on Sep 6, 2026
1 alert found:
AnomalyThis fragment is a process-execution wrapper and sandbox/test helper. It does not show overt malware behaviors (no network/exfiltration/credential theft in the Python shown), but it intentionally enables high-impact execution: it runs a repository bash script with caller-controlled command-line arguments and environment/PATH, and it can create an executable named `sf` from configurable content to redirect what the shell script executes. Because the actual script and the fake `sf` payload contents are not included in the snippet, the supply-chain/security risk is best treated as medium and review-dependent: verify deploy-and-report.sh and the real values of _FAKE_SF_PROD/_FAKE_SF_SANDBOX for malicious logic or tampering.