sidequest

Warn

Audited by Socket on Sep 26, 2026

1 alert found:

Security
SecurityMEDIUM
scripts/sidequest.sh

This is a terminal-launch helper with no clear standalone malware behavior. However, it constructs shell commands from untrusted arguments and an unescaped working-directory path, which can enable command injection when those values are controlled by an attacker.

Confidence: 96%Severity: 72%
Audit Metadata
Analyzed At
Sep 26, 2026, 06:29 AM
Package URL
pkg:socket/skills-sh/michaelboeding%2Fskills%2Fsidequest%2F@e6d80db8763397b638016dd528909db60db934a640beb00d0339e7a23c1247e1