branch-context

Warn

Audited by Socket on Oct 6, 2026

1 alert found:

Anomaly
AnomalyLOW
append-handoff.sh

This utility has a shell-injection flaw: a summary containing command substitution or backticks can execute commands when the script creates a stub handoff. Quote the heredoc delimiter and insert the summary safely. The remaining behavior is consistent with handoff-file generation.

Confidence: 99%Severity: 62%
Audit Metadata
Analyzed At
Oct 6, 2026, 11:19 PM
Package URL
pkg:socket/skills-sh/pydantic%2Fpydantic-ai-harness%2Fbranch-context%2F@3a881d9a600bb77ed09fd261448ea9f824b569a0802c0443146b254b6f5e230f