design-brief-generator
Warn
Audited by Socket on Sep 15, 2026
1 alert found:
SecuritySecurityscripts/generate_brief.sh
MEDIUMSecurityMEDIUM
scripts/generate_brief.sh
The script appears to have a legitimate document-generation purpose and does not contain evident malware. However, its use of eval with unsanitized interactive input creates a high-severity local command-injection vulnerability, and the unrestricted output filename permits arbitrary accessible file overwrites. Replace eval with direct variable assignment or safe indirection and validate the output path before writing.
Confidence: 99%Severity: 87%
Audit Metadata