arch-manage
Warn
Audited by Socket on Sep 10, 2026
1 alert found:
AnomalyAnomalyassets/arch-fitness/checks/example.mjs.template
LOWAnomalyLOW
assets/arch-fitness/checks/example.mjs.template
This module is a templated Node.js check harness that executes a substituted shell command synchronously via execSync and reports results to console, exiting non-zero on blocking failures. There are no explicit signs of backdoors, credential theft, or network exfiltration in the shown code, but the execSync usage without allowlisting/sanitization makes it a high-impact sink if template substitution values are not strictly controlled. Additionally, printing err.stdout/err.message on failure can leak sensitive command output into logs.
Confidence: 62%Severity: 56%
Audit Metadata