aif-dockerize

Warn

Audited by Socket on Sep 18, 2026

1 alert found:

Anomaly
AnomalyLOW
templates/deploy.sh

The script is a conventional Docker deployment script, but sourcing `.env` executes arbitrary Bash code and is a significant supply-chain and deployment-integrity risk if the file is attacker-controlled or unexpectedly modified. The Compose files and build contexts are critical unreviewed dependencies. No direct malware behavior is evident in the supplied script. Use a non-executing environment-file parser or strictly controlled configuration permissions, validate required variables, and review the referenced Compose files and Dockerfiles.

Confidence: 98%Severity: 62%
Audit Metadata
Analyzed At
Sep 18, 2026, 07:28 PM
Package URL
pkg:socket/skills-sh/lee-to%2Fai-factory%2Faif-dockerize%2F@a4f796ef0c63dc7760a311e4bc4235bed85c163741cae76e1fc33a3ba4873d03