apex-learn
Warn
Audited by Socket on Sep 17, 2026
1 alert found:
AnomalyAnomalyscripts/append-learning.sh
LOWAnomalyLOW
scripts/append-learning.sh
The script appears intended for local documentation maintenance and contains no evident malware or data-exfiltration behavior. It has a moderate command-injection-style file-modification risk: untrusted rule text can inject sed syntax, particularly through embedded newlines, and the caller can select any writable target path. Rule text should be passed through a safe escaping mechanism or inserted using a temporary file/line-safe method, and the target path should be constrained if inputs are untrusted.
Confidence: 97%Severity: 58%
Audit Metadata