fix-unnatural-line-breaks

Warn

Audited by Socket on Sep 27, 2026

1 alert found:

Security
SecurityMEDIUM
.github/workflows/release.yml

The workflow has a command-injection risk because the manually supplied version is interpolated directly into shell scripts. Exploitation requires a user able to dispatch the workflow, but injected commands could run in a job with contents write permission. No evidence of embedded malware is present.

Confidence: 98%Severity: 72%
Audit Metadata
Analyzed At
Sep 27, 2026, 04:26 AM
Package URL
pkg:socket/skills-sh/otnc%2Fskills_fix-unnatural-line-breaks%2Ffix-unnatural-line-breaks%2F@0693c26177ab8abc076845c7030d5fb6625b9220659a047310c569892f1f9173