ops-f36-plant

Warn

Audited by Socket on Aug 26, 2026

1 alert found:

Anomaly
AnomalyLOW
buttons.yaml

The fragment is a readable operational button manifest and shows no evidence of intentional malware or supply-chain sabotage. It does contain a potential command-injection vulnerability where unvalidated clipboard content is embedded in shell command substitution, with impact dependent on the external command runner. The referenced external commands require separate review.

Confidence: 96%Severity: 58%
Audit Metadata
Analyzed At
Aug 26, 2026, 06:01 PM
Package URL
pkg:socket/skills-sh/grahama1970%2Fagent-skills%2Fops-f36-plant%2F@a58a1f72b12993085c8493ba577f3a1102f7265abd060a3333ed4ac3b5940c3f
Security Audit — socket — ops-f36-plant