specimen

Warn

Audited by Socket on Nov 4, 2026

1 alert found:

Anomaly
AnomalyLOW
piece.mjs

This is a specimen loader and basic contract validator. Its principal security risk is intentional dynamic execution of whichever file the caller supplies; untrusted specimen files can run arbitrary code with the host process's permissions, and temporary copying is not a security boundary. No independent malicious behavior or exfiltration is evident in the fragment; severity depends on whether loaded specimens are trusted.

Confidence: 99%Severity: 56%
Audit Metadata
Analyzed At
Nov 4, 2026, 05:28 PM
Package URL
pkg:socket/skills-sh/lucasmarkes%2Fskills%2Fspecimen%2F@35afbc03835f477f639565e11f5f1d34aae19ac6711d74d9c6730b6d438e115c