power-research
Warn
Audited by Socket on Oct 8, 2026
1 alert found:
AnomalyAnomalyscripts/init.py
LOWAnomalyLOW
scripts/init.py
The code is a local research-folder scaffolder and shows no evidence of malware. However, insufficient validation of the topic allows path traversal or absolute-path input to redirect directory creation and template writes outside the intended research directory. Risk is primarily relevant when an untrusted party can provide the CLI argument.
Confidence: 99%Severity: 55%
Audit Metadata