always-current-datetime

Warn

Audited by Socket on Sep 17, 2026

1 alert found:

Anomaly
AnomalyLOW
scripts/run_agentic_request.py

The supplied code is a readable command-line orchestration wrapper, not clear malware. It deliberately executes a caller-selected subprocess and reads a caller-selected request file, creating significant capability and trust-boundary risk if its command-line inputs are attacker-controlled. Use of an argument list without `shell=True` prevents direct shell injection, but does not prevent arbitrary executable selection. Assessment of `build_envelope` requires its source. The shown fragment also appears syntactically incomplete due to a missing closing parenthesis.

Confidence: 98%Severity: 62%
Audit Metadata
Analyzed At
Sep 17, 2026, 02:01 AM
Package URL
pkg:socket/skills-sh/srinitude%2Fskills%2Falways-current-datetime%2F@ac4b71caab5e88c34e7968391aa69a369ad87df495c1d1c8ecc07bbed0b9f09b