graphify

Warn

Audited by Socket on Oct 11, 2026

1 alert found:

Anomaly
AnomalyLOW
references/add-watch.md

The fragment is operational documentation, not evidence of malware. Its add-command template has command/code injection risks if placeholders contain shell or Python metacharacters, and it fetches user-selected URLs. Values should be passed as arguments or safely encoded rather than interpolated into shell and source code.

Confidence: 98%Severity: 68%
Audit Metadata
Analyzed At
Oct 11, 2026, 05:32 AM
Package URL
pkg:socket/skills-sh/seaworld008%2Fcommonly-used-high-value-skills%2Fgraphify%2F@a50f97004459f27206810c31fc600ca3563614dd37fde4740977a976a632bd0d