cron-job-test-author

Warn

Audited by Socket on Oct 2, 2026

2 alerts found:

Anomalyx2
AnomalyLOW
evals/lock-added-after-the-double-write-incident/task.md

The visible tests and notes suggest a lock intended to prevent overlapping warehouse-sync runs, but the documented deployment uses separate local lock files on two hosts, so the mechanism as described cannot provide fleet-wide mutual exclusion. Long runtimes also make stale-lock recovery potentially unsafe if it expires a live run's lock. This is an operational correctness risk, not evidence of malicious behavior; the implementation details are not visible in this fragment.

Confidence: 96%Severity: 62%
AnomalyLOW
evals/dunning-run-missing-since-january/task.md

The fragment shows significant schedule configuration errors and tests that fail to detect them. This creates a plausible operational risk to billing workflows, but the visible evidence does not establish malicious intent or malware. Review and correct the expressions and add tests that verify full recurrence semantics against the stated intent.

Confidence: 97%Severity: 55%
Audit Metadata
Analyzed At
Oct 2, 2026, 09:58 AM
Package URL
pkg:socket/skills-sh/testland%2Fqa%2Fcron-job-test-author%2F@87992ac677b4291586e73824f89d31648c873cff1a1c871cdb68f37c708619c8