clean-vercel-deployment-storage

Warn

Audited by Socket on Sep 29, 2026

2 alerts found:

Anomalyx2
AnomalyLOW
src/cli.ts

No clear evidence of malware or covert data theft appears in this fragment. The main risks are operational: execute trusts a locally supplied report beyond a minimal preflight status check, and retention defaults production expiration to one minute. Use trusted reports and explicitly configure retention values before running retention.

Confidence: 98%Severity: 57%
AnomalyLOW
references/incident-2026-09-08.md

This is a postmortem describing intended bulk deletion, not executable malware. The notable security concern is the instruction to read a locally stored Bearer token and use it to authorize destructive API requests. Verify authorization and obtain credentials through an approved mechanism before acting; the text alone does not establish malicious intent.

Confidence: 96%Severity: 58%
Audit Metadata
Analyzed At
Sep 29, 2026, 05:51 PM
Package URL
pkg:socket/skills-sh/ruan-cat%2Fmonorepo%2Fclean-vercel-deployment-storage%2F@897ba0e548b9672b727c055f341e524413990e97f41da057b8e784e7ef8a2705