subsystem-compile
Warn
Audited by Socket on Nov 2, 2026
1 alert found:
AnomalyAnomalyscripts/subsystem-compile.py
LOWAnomalyLOW
scripts/subsystem-compile.py
This is a subsystem XML generator, with no evident malware, network exfiltration, credential theft, or persistence behavior. It has a security warning: untrusted JSON name and child values can cause path traversal or absolute-path writes, and several values are interpolated into XML without escaping. The relevant affected paths are derived from -OutputDir and -Parent, and generated files are under Subsystems when inputs are benign; severity is moderate if definitions are untrusted.
Confidence: 99%Severity: 58%
Audit Metadata