node-red

Warn

Audited by Socket on Oct 8, 2026

1 alert found:

Anomaly
AnomalyLOW
assets/templates/mqtt_flow.json

The fragment appears to implement a sensor MQTT integration rather than intentional malware. However, the processed-data output republishes to the input topic, creating a potentially unbounded MQTT feedback loop and denial-of-service risk. Topic-derived object keys also create a prototype-manipulation concern. Configure a distinct output topic or otherwise prevent reprocessing, and validate or safely store sensor IDs.

Confidence: 98%Severity: 68%
Audit Metadata
Analyzed At
Oct 8, 2026, 12:15 PM
Package URL
pkg:socket/skills-sh/jwiegley%2Fclaude-prompts%2Fnode-red%2F@3e5c354cda1e57e4b778f1d5d2e1d8ef9df475add323dcd4d22d95550b8cf357