pm-preview
Warn
Audited by Socket on Sep 25, 2026
1 alert found:
SecuritySecurityscripts/stop-preview.sh
MEDIUMSecurityMEDIUM
scripts/stop-preview.sh
The script has potentially destructive path-validation and process-targeting risks. In particular, the /tmp prefix check can permit deletion outside /tmp via path traversal, and an untrusted PID file can cause signals to be sent to unintended processes. The fragment does not provide evidence of malicious intent.
Confidence: 98%Severity: 72%
Audit Metadata