tooluniverse-gene-enrichment

Warn

Audited by Socket on Oct 7, 2026

1 alert found:

Anomaly
AnomalyLOW
scripts/enrichgo_runner.py

The supplied fragment is incomplete and syntactically invalid because R_TEMPLATE has no assigned value, so it cannot execute as shown. No direct malware behavior is evident in the visible code: there are no network connections, credential harvesting, persistence mechanisms, destructive file operations, or shell invocation through a command string. However, the design dynamically formats user-controlled values into executable R code, creating a potentially serious code-injection risk if the missing template does not safely quote or validate those values. Review the complete R_TEMPLATE before use and prefer passing values through files or command-line arguments with strict validation.

Confidence: 96%Severity: 55%
Audit Metadata
Analyzed At
Oct 7, 2026, 01:49 PM
Package URL
pkg:socket/skills-sh/mims-harvard%2Ftooluniverse%2Ftooluniverse-gene-enrichment%2F@c87b8bcdf8f9270d8609a9ecd54691cba18ea13ae102312726a8682de84d88fb