creating-ansible-playbooks
Warn
Audited by Socket on Sep 9, 2026
1 alert found:
AnomalyAnomalyscripts/test_playbook.sh
LOWAnomalyLOW
scripts/test_playbook.sh
The fragment is a legitimate Ansible-in-Docker test script and shows no direct evidence of malware, credential theft, persistence, or data exfiltration. It does contain a concrete command-injection weakness because several user-controlled options are interpolated into a bash -c command without robust argument quoting. The impact is primarily within the test container, but container escape or exposed Docker privileges could increase impact. Docker images and runtime package installations are also unpinned supply-chain dependencies.
Confidence: 98%Severity: 62%
Audit Metadata