workflow-orchestrator

Warn

Audited by Socket on Sep 17, 2026

1 alert found:

Anomaly
AnomalyLOW
reference/rollback-recovery.md

No clear malicious behavior or supply-chain attack is present. The fragment is a legitimate rollback and recovery guide, but several examples pose operational security risks if adapted directly: unquoted shell inputs, destructive privileged commands, unsafe dynamic SQL identifiers, and insufficient validation or authorization. These are security-hardening concerns rather than evidence of malware.

Confidence: 98%Severity: 55%
Audit Metadata
Analyzed At
Sep 17, 2026, 09:59 AM
Package URL
pkg:socket/skills-sh/scientiacapital%2Fskills%2Fworkflow-orchestrator%2F@06dcc732a54ba13d73db06d0be6b01138920abc69fe8e4ba2e2e18cc0f4209ae