finding-duplicate-functions

Warn

Audited by Socket on Sep 14, 2026

1 alert found:

Anomaly
AnomalyLOW
scripts/prepare-category-analysis.sh

The code is a legitimate JSON categorization utility with no clear malware indicators. Its main security weakness is unsanitized use of the JSON category field in output filenames, enabling path traversal and unintended file overwrite when the categorized input is attacker-controlled or untrusted. Category names should be restricted to safe filename characters, and generated paths should be verified to remain within the output directory.

Confidence: 98%Severity: 57%
Audit Metadata
Analyzed At
Sep 14, 2026, 04:14 PM
Package URL
pkg:socket/skills-sh/obra%2Fsuperpowers-lab%2Ffinding-duplicate-functions%2F@4c8b16b238ae265364627951a11a747fe2deb808099c03178f9f871e201651b3
Security Audit — socket — finding-duplicate-functions