debugging-code

Warn

Audited by Socket on Aug 5, 2026

1 alert found:

Anomaly
AnomalyLOW
scripts/install-dap.sh

This module is a network-based installer that downloads an executable from GitHub Releases and installs it to a standard binary directory, and it also supports a fallback that runs 'go install ...@latest'. There is no cryptographic integrity/authenticity verification of the downloaded artifact, and version selection is mutable ('latest' for both release and Go fallback), creating a meaningful supply-chain attack surface. No direct evidence of malware or backdoor behavior exists in the shown code, but the integrity guarantees are weak and should be addressed for secure deployments.

Confidence: 72%Severity: 67%
Audit Metadata
Analyzed At
Aug 5, 2026, 01:32 PM
Package URL
pkg:socket/skills-sh/sickn33%2Fantigravity-awesome-skills%2Fdebugging-code%2F@1aa9260356c70c76db567941f8dfc25505a3c8b55c2373493b6c79530ac479ee
Security Audit — socket — debugging-code