apex-learn

Warn

Audited by Socket on Sep 17, 2026

1 alert found:

Anomaly
AnomalyLOW
scripts/append-learning.sh

The script appears intended for local documentation maintenance and contains no evident malware or data-exfiltration behavior. It has a moderate command-injection-style file-modification risk: untrusted rule text can inject sed syntax, particularly through embedded newlines, and the caller can select any writable target path. Rule text should be passed through a safe escaping mechanism or inserted using a temporary file/line-safe method, and the target path should be constrained if inputs are untrusted.

Confidence: 97%Severity: 58%
Audit Metadata
Analyzed At
Sep 17, 2026, 12:44 AM
Package URL
pkg:socket/skills-sh/othmanadi%2Fapex%2Fapex-learn%2F@36b3a390d8414456900cb59a1e7ab0f4a8f999fab71c718e5770e98eb0972dcd
Security Audit — socket — apex-learn