relay
Warn
Audited by Socket on Sep 12, 2026
1 alert found:
AnomalyAnomalyscripts/relay-lib.sh
LOWAnomalyLOW
scripts/relay-lib.sh
The code appears to be a benign shell helper library with no evident malware. The primary security concern is intentional but dangerous use of eval on RELAY_CLIPBOARD_CMD, which permits arbitrary shell execution if the environment variable is attacker-controlled. Clipboard exposure and environment-controlled path redirection are secondary concerns. Replacing eval with a safely structured command interface would reduce the risk.
Confidence: 98%Severity: 55%
Audit Metadata