mem

Warn

Audited by Socket on Sep 8, 2026

1 alert found:

Anomaly
AnomalyLOW
scripts/schema.py

No direct malware indicators (like network exfiltration, credential theft, or process execution) are present in this module. However, it executes template-based generation via copier with unsafe=True and loads schema/templates from filesystem locations that may be influenced by user-controlled references (schema-path, schema_name, children_from.path). Additionally, generated output paths derive from rendered segments without explicit traversal/character restriction. Overall, this is not clearly malicious code by itself, but it has significant risk of abuse/sabotage in untrusted-input scenarios and should be reviewed and constrained (trust boundaries, path sanitization, avoid unsafe=True, and restrict schema/template locations).

Confidence: 66%Severity: 62%
Audit Metadata
Analyzed At
Sep 8, 2026, 07:27 AM
Package URL
pkg:socket/skills-sh/kevinslin%2Fagstack%2Fmem%2F@f2950e1aaae02df630f64da3b2fc3f6612326a6d5eb59a994bb69d4d4636c836