branch-context
Warn
Audited by Socket on Oct 6, 2026
1 alert found:
AnomalyAnomalyappend-handoff.sh
LOWAnomalyLOW
append-handoff.sh
This utility has a shell-injection flaw: a summary containing command substitution or backticks can execute commands when the script creates a stub handoff. Quote the heredoc delimiter and insert the summary safely. The remaining behavior is consistent with handoff-file generation.
Confidence: 99%Severity: 62%
Audit Metadata