tooluniverse-gene-enrichment
Warn
Audited by Socket on Oct 7, 2026
1 alert found:
AnomalyAnomalyscripts/enrichgo_runner.py
LOWAnomalyLOW
scripts/enrichgo_runner.py
The supplied fragment is incomplete and syntactically invalid because R_TEMPLATE has no assigned value, so it cannot execute as shown. No direct malware behavior is evident in the visible code: there are no network connections, credential harvesting, persistence mechanisms, destructive file operations, or shell invocation through a command string. However, the design dynamically formats user-controlled values into executable R code, creating a potentially serious code-injection risk if the missing template does not safely quote or validate those values. Review the complete R_TEMPLATE before use and prefer passing values through files or command-line arguments with strict validation.
Confidence: 96%Severity: 55%
Audit Metadata