loop-until-done
Warn
Audited by Socket on Oct 3, 2026
1 alert found:
SecuritySecurityactivities.py
MEDIUMSecurityMEDIUM
activities.py
This is a command-verification activity with a significant execution risk if callers can control command: shell=True permits arbitrary shell commands with the service's privileges. Restrict and validate command inputs or use an argument list with shell=False. Output truncation does not limit peak capture memory.
Confidence: 99%Severity: 72%
Audit Metadata