protheus-reference

Warn

Audited by Socket on Sep 15, 2026

1 alert found:

Security
SecurityMEDIUM
rest-api-reference.md

The material is legitimate REST API documentation and example CRUD code. It contains no clear malware or supply-chain sabotage indicators. It does contain notable security risks if deployed unchanged: hardcoded sample credentials and tokens, wildcard CORS, HTTP without TLS, broad customer-data exposure, limited input and JSON validation, insufficiently demonstrated authorization, possible resource exhaustion through pagination or batch requests, and potentially verbose error responses. Replace all example secrets, enforce HTTPS and restrictive CORS, validate and bound inputs, apply authorization and rate limits, and avoid exposing internal exception details.

Confidence: 98%Severity: 72%
Audit Metadata
Analyzed At
Sep 15, 2026, 11:02 AM
Package URL
pkg:socket/skills-sh/thalysjuvenal%2Fadvpl-specialist%2Fprotheus-reference%2F@9fd033acfe8cb4fb0bb917130138435ac2a6221546e990eeadace7e4dfa0a192
Security Audit — socket — protheus-reference