team-lead

Warn

Audited by Socket on Oct 13, 2026

1 alert found:

Anomaly
AnomalyLOW
scripts/stall-watch.sh

The script is a Herdr stall-monitoring utility, not apparent malware. Its main security risk is executing sourced state files from a configurable directory that may be in `/tmp`; protect that directory and its files from untrusted modification, or replace shell sourcing with non-executable data parsing. Treat `--busy-if` as trusted shell input.

Confidence: 97%Severity: 56%
Audit Metadata
Analyzed At
Oct 13, 2026, 10:02 PM
Package URL
pkg:socket/skills-sh/svallory%2Ftutor%2Fteam-lead%2F@67f0c5837273b927bff5f36f32f61b8d763965bb52597d1971af3a234a688308