power-research

Warn

Audited by Socket on Oct 8, 2026

1 alert found:

Anomaly
AnomalyLOW
scripts/init.py

The code is a local research-folder scaffolder and shows no evidence of malware. However, insufficient validation of the topic allows path traversal or absolute-path input to redirect directory creation and template writes outside the intended research directory. Risk is primarily relevant when an untrusted party can provide the CLI argument.

Confidence: 99%Severity: 55%
Audit Metadata
Analyzed At
Oct 8, 2026, 07:08 PM
Package URL
pkg:socket/skills-sh/lirrensi%2Fskills-hoard%2Fpower-research%2F@3a8b12cb5f04eeb5652e7f4df3d02759f88a90d4ba0104cbfca0fe039e6e58f9