arch-manage

Warn

Audited by Socket on Sep 10, 2026

1 alert found:

Anomaly
AnomalyLOW
assets/arch-fitness/checks/example.mjs.template

This module is a templated Node.js check harness that executes a substituted shell command synchronously via execSync and reports results to console, exiting non-zero on blocking failures. There are no explicit signs of backdoors, credential theft, or network exfiltration in the shown code, but the execSync usage without allowlisting/sanitization makes it a high-impact sink if template substitution values are not strictly controlled. Additionally, printing err.stdout/err.message on failure can leak sensitive command output into logs.

Confidence: 62%Severity: 56%
Audit Metadata
Analyzed At
Sep 10, 2026, 08:06 PM
Package URL
pkg:socket/skills-sh/juanca202%2Fsdd-devkit%2Farch-manage%2F@47cd3b2a694d674dc2a9eee2bcfef8ed786acf3a1863a52ee7fe4b3c8f9f72dc
Security Audit — socket — arch-manage