skills/testland/qa/hypothesis-testing/Socket

hypothesis-testing

Warn

Audited by Socket on Nov 1, 2026

1 alert found:

Anomaly

Anomalyevals/nightly-property-job-went-from-four-minutes-to-forty/task.md

LOW

AnomalyLOW

evals/nightly-property-job-went-from-four-minutes-to-forty/task.md

No evidence of malware or intentional data theft is present. The main concerns are a non-terminating short_id call for negative inputs, unbounded PBKDF2 iterations during verification, and inconsistent email account-key normalization. These are reliability and security risks rather than clear malicious behavior.

Confidence: 98%Severity: 58%

Audit Metadata

Analyzed At

Nov 1, 2026, 08:27 AM

Package URL

pkg:socket/skills-sh/testland%2Fqa%2Fhypothesis-testing%2F@6f64ad10160233a85ac42aa62fb3e5c5dac977e9d04a4acdab668809d72ae2ff