path

Warn

Audited by Socket on Sep 29, 2026

2 alerts found:

Anomalyx2
AnomalyLOW
scripts/workflow_run.py

This is a workflow orchestration module, not evidently malware. The main security concern is the runtime override: handling an untrusted repository can execute its status_runtime.py and allow it to select later helper scripts. Treat repositories using this mechanism as trusted, or validate the runtime and helper paths before execution. No direct credential theft, suspicious network activity, or obfuscation is present in this fragment.

Confidence: 97%Severity: 63%
AnomalyLOW
scripts/status_runtime.py

No clear malware behavior is present. The primary security concern is execution of Python runtime code whose integrity is checked against metadata that is not independently trusted, plus execution of a repository-local fallback runtime. Treat the repository and runtime storage as trusted inputs; do not use this launcher with attacker-controlled repositories without an external trust mechanism.

Confidence: 97%Severity: 62%
Audit Metadata
Analyzed At
Sep 29, 2026, 04:42 PM
Package URL
pkg:socket/skills-sh/open-gsd%2Fgsd-path%2Fpath%2F@382eceef0ecbc16f0c2a1d16e8981b0f811490747ba0a2a59dd613bc74f4446d