subsystem-compile

Warn

Audited by Socket on Nov 2, 2026

1 alert found:

Anomaly
AnomalyLOW
scripts/subsystem-compile.py

This is a subsystem XML generator, with no evident malware, network exfiltration, credential theft, or persistence behavior. It has a security warning: untrusted JSON name and child values can cause path traversal or absolute-path writes, and several values are interpolated into XML without escaping. The relevant affected paths are derived from -OutputDir and -Parent, and generated files are under Subsystems when inputs are benign; severity is moderate if definitions are untrusted.

Confidence: 99%Severity: 58%
Audit Metadata
Analyzed At
Nov 2, 2026, 05:53 PM
Package URL
pkg:socket/skills-sh/nikolay-shirokov%2Fcc-1c-skills%2Fsubsystem-compile%2F@3af4a308d993e4686f53124cc7f7eedeea22f13e6e360a566d76bc856167b7e4