simready-foundation-create-package

Warn

Audited by Socket on Oct 3, 2026

1 alert found:

Security
SecurityMEDIUM
assets/scripts/sr_pkg_sample/_conformance_writer.py

The fragment has a significant code-execution risk: `eval` is used on feature-summary strings. This is unsafe when summaries are untrusted. The code does not otherwise show clear malicious behavior; replace `eval` with safe parsing such as `json.loads` where the inputs are JSON.

Confidence: 99%Severity: 78%
Audit Metadata
Analyzed At
Oct 3, 2026, 05:23 PM
Package URL
pkg:socket/skills-sh/nvidia%2Fsimready-foundation%2Fsimready-foundation-create-package%2F@5285e4aaafbb5b533fe230421efdf4d85067351220b28d643b018a193637381a
Security Audit — socket — simready-foundation-create-package