distributed-debugging-debug-trace

Warn

Audited by Socket on Oct 9, 2026

1 alert found:

Security
SecurityMEDIUM
resources/implementation-playbook.md

The fragment is readable debugging infrastructure rather than evident malware. However, its unauthenticated remotely reachable inspector/evaluation capability can provide arbitrary code execution in the Node process if the listener is network-accessible. It also risks leaking sensitive telemetry and enables dashboard DOM injection. Do not expose the remote debugging services publicly; restrict them to trusted local/private access and add strong authentication and transport controls.

Confidence: 98%Severity: 90%
Audit Metadata
Analyzed At
Oct 9, 2026, 02:47 PM
Package URL
pkg:socket/skills-sh/francostino%2Fopencode-skills-collection%2Fdistributed-debugging-debug-trace%2F@35f67c642ff1435eda02f75cd2698ff6a308dba09d12e96977f87887b85c05da