finding-duplicate-functions
Warn
Audited by Socket on Sep 14, 2026
1 alert found:
AnomalyAnomalyscripts/prepare-category-analysis.sh
LOWAnomalyLOW
scripts/prepare-category-analysis.sh
The code is a legitimate JSON categorization utility with no clear malware indicators. Its main security weakness is unsanitized use of the JSON category field in output filenames, enabling path traversal and unintended file overwrite when the categorized input is attacker-controlled or untrusted. Category names should be restricted to safe filename characters, and generated paths should be verified to remain within the output directory.
Confidence: 98%Severity: 57%
Audit Metadata