expo-architect
Warn
Audited by Socket on Oct 7, 2026
1 alert found:
AnomalyAnomalyscripts/init-expo.py
LOWAnomalyLOW
scripts/init-expo.py
No clear malware or data exfiltration is evident. The main security issue is unsafe handling of user-controlled tab names in output paths, creating a potential arbitrary file-write/path-traversal risk when running the generator. Unescaped labels can also inject code into generated source. The supplied fragment appears syntactically incomplete, limiting execution-level assessment.
Confidence: 97%Severity: 65%
Audit Metadata