relay

Warn

Audited by Socket on Sep 12, 2026

1 alert found:

Anomaly
AnomalyLOW
scripts/relay-lib.sh

The code appears to be a benign shell helper library with no evident malware. The primary security concern is intentional but dangerous use of eval on RELAY_CLIPBOARD_CMD, which permits arbitrary shell execution if the environment variable is attacker-controlled. Clipboard exposure and environment-controlled path redirection are secondary concerns. Replacing eval with a safely structured command interface would reduce the risk.

Confidence: 98%Severity: 55%
Audit Metadata
Analyzed At
Sep 12, 2026, 04:34 PM
Package URL
pkg:socket/skills-sh/sangrokjung%2Fclaude-forge%2Frelay%2F@2371e28db40d30cf94e00ed97c7773ecd2eddf43b72d35595adafb7df177d140