trading-plan-generator
Warn
Audited by Socket on Sep 15, 2026
1 alert found:
AnomalyAnomalyscripts/position_calculator.sh
LOWAnomalyLOW
scripts/position_calculator.sh
The code is an ordinary position-size calculator, but it has a security weakness: unvalidated interactive input is embedded directly into bc programs. In affected bc implementations, crafted input could execute commands or otherwise manipulate calculations. Numeric validation and safe arithmetic handling are required before use in a broader or automated context. No evidence of intentional malware, data theft, persistence, or network exfiltration appears in this fragment.
Confidence: 94%Severity: 62%
Audit Metadata