mathodology-workbench

Warn

Audited by Socket on Nov 4, 2026

1 alert found:

Anomaly
AnomalyLOW
scripts/workbench/results.py

This module processes workspace JSON results and generates LaTeX files. Untrusted result files can inject LaTeX through display values, unvalidated value names, or raw table alignment strings, potentially affecting compilation when the generated files are included. No network, credential collection, process execution, or destructive behavior is present; severity is conditional on untrusted results being compiled.

Confidence: 98%Severity: 53%
Audit Metadata
Analyzed At
Nov 4, 2026, 04:41 AM
Package URL
pkg:socket/skills-sh/sweetcornna%2Fmathodology%2Fmathodology-workbench%2F@6d9e18ff155ddbb6df0658f86f0af3cb850c18ccbec72129e7776c60a8222641