frontierharness-eval
Warn
Audited by Socket on Sep 8, 2026
1 alert found:
SecuritySecurityscripts/trial-worker.sh
MEDIUMSecurityMEDIUM
scripts/trial-worker.sh
This is a task-runner script whose core behavior is intentional command execution. It is not inherently malware based on the supplied fragment, but it becomes high risk if an attacker can control the command argument, state path, FH_WORK_DIR, or relevant filesystem contents. The direct bash -lc invocation and lack of input validation should be treated as an authorization boundary requiring trusted callers or strong sandboxing.
Confidence: 98%Severity: 72%
Audit Metadata