debugging-code

Warn

Audited by Socket on Sep 6, 2026

1 alert found:

Anomaly
AnomalyLOW
scripts/install-dap.sh

This module is a network-based installer that downloads an executable from GitHub Releases and installs it to a standard binary directory, and it also supports a fallback that runs 'go install ...@latest'. There is no cryptographic integrity/authenticity verification of the downloaded artifact, and version selection is mutable ('latest' for both release and Go fallback), creating a meaningful supply-chain attack surface. No direct evidence of malware or backdoor behavior exists in the shown code, but the integrity guarantees are weak and should be addressed for secure deployments.

Confidence: 72%Severity: 67%
Audit Metadata
Analyzed At
Sep 6, 2026, 01:23 PM
Package URL
pkg:socket/skills-sh/sickn33%2Fagentic-awesome-skills%2Fdebugging-code%2F@376c145f3a7bd53b3f7613c1efc0eaa3eb0391c8d331dd6772b02a7bcae860aa
Security Audit — socket — debugging-code