xcode-makefiles

Warn

Audited by Socket on May 10, 2026

1 alert found:

Anomaly
AnomalyLOW
templates/toolkit/Makefile

No explicit malicious payload is visible in this Makefile fragment. However, it is a high-impact orchestration layer that executes multiple helper scripts from a configurable SCRIPTS_DIR and runs one of them at parse time via $(shell ...). If SCRIPTS_DIR or any helper script is compromised, arbitrary code execution during the build/test workflow is plausible. Security risk is therefore moderate (primarily supply-chain/script integrity risk), with low confidence that malware exists within this snippet itself.

Confidence: 62%Severity: 55%
Audit Metadata
Analyzed At
May 10, 2026, 11:22 AM
Package URL
pkg:socket/skills-sh/robertguss%2Fclaude-code-toolkit%2Fxcode-makefiles%2F@cd50de3e8c7596f915ba8b5dfb5f6062052f5f28