autopilot
Warn
Audited by Socket on Oct 7, 2026
1 alert found:
AnomalyAnomalyscripts/lib/provider.sh
LOWAnomalyLOW
scripts/lib/provider.sh
The fragment is an AI-provider orchestration script, not apparent malware. Its main security risk is intentional delegation of broad filesystem and command execution authority to external AI CLIs, especially through disabled approval and sandbox controls. Environment-controlled binary overrides also require a trusted execution environment. Within the supplied code, there is no direct credential theft, exfiltration, persistence, or destructive payload.
Confidence: 97%Severity: 68%
Audit Metadata