service-omni-presence-user-config-deploy

Warn

Audited by Socket on Sep 6, 2026

1 alert found:

Anomaly
AnomalyLOW
scripts/tests/_bootstrap.py

This fragment is a process-execution wrapper and sandbox/test helper. It does not show overt malware behaviors (no network/exfiltration/credential theft in the Python shown), but it intentionally enables high-impact execution: it runs a repository bash script with caller-controlled command-line arguments and environment/PATH, and it can create an executable named `sf` from configurable content to redirect what the shell script executes. Because the actual script and the fake `sf` payload contents are not included in the snippet, the supply-chain/security risk is best treated as medium and review-dependent: verify deploy-and-report.sh and the real values of _FAKE_SF_PROD/_FAKE_SF_SANDBOX for malicious logic or tampering.

Confidence: 60%Severity: 62%
Audit Metadata
Analyzed At
Sep 6, 2026, 01:12 PM
Package URL
pkg:socket/skills-sh/forcedotcom%2Fsf-skills%2Fservice-omni-presence-user-config-deploy%2F@619f94dfc9fb20a0d043c9a1bf5e828d0a5f118a4ccd6978e63099984756906d
Security Audit — socket — service-omni-presence-user-config-deploy