gsd-path-inspect

Warn

Audited by Socket on Sep 29, 2026

1 alert found:

Anomaly
AnomalyLOW
scripts/workflow_run.py

This is a workflow orchestration module, not evidently malware. The main security concern is the runtime override: handling an untrusted repository can execute its status_runtime.py and allow it to select later helper scripts. Treat repositories using this mechanism as trusted, or validate the runtime and helper paths before execution. No direct credential theft, suspicious network activity, or obfuscation is present in this fragment.

Confidence: 97%Severity: 63%
Audit Metadata
Analyzed At
Sep 29, 2026, 04:41 PM
Package URL
pkg:socket/skills-sh/open-gsd%2Fgsd-path%2Fgsd-path-inspect%2F@4385e94f6cf627be2219dba6f50d6fa4786b240e63c3a6ec32a9f4cbbf3eb15c