loop-until-done

Warn

Audited by Socket on Oct 3, 2026

1 alert found:

Security
SecurityMEDIUM
activities.py

This is a command-verification activity with a significant execution risk if callers can control command: shell=True permits arbitrary shell commands with the service's privileges. Restrict and validate command inputs or use an argument list with shell=False. Output truncation does not limit peak capture memory.

Confidence: 99%Severity: 72%
Audit Metadata
Analyzed At
Oct 3, 2026, 08:44 PM
Package URL
pkg:socket/skills-sh/npow%2Fclaude-skills%2Floop-until-done%2F@4973091ae70a74d97dc968b89f6a09b58624799369a1736e87a1be47f98fe6b2