lov-organize-storage
Warn
Audited by Socket on Sep 10, 2026
1 alert found:
SecuritySecurityscripts/storage_organizer.py
MEDIUMSecurityMEDIUM
scripts/storage_organizer.py
The code is a legitimate storage inventory and file-move utility with no apparent malware or exfiltration behavior. It has two important security weaknesses: apply_plan() can be abused through a tampered plan to operate outside the intended root, and write_rollback() can generate shell-injection commands from specially crafted paths. The apparent unmatched parenthesis at the end would also prevent execution as supplied.
Confidence: 98%Severity: 72%
Audit Metadata