fsharp-verify-api

Warn

Audited by Socket on Oct 13, 2026

1 alert found:

Anomaly
AnomalyLOW
scripts/show-api.ps1

The code appears intended as an API-inspection wrapper, not malware. However, untrusted parameter values can inject F# source into the script executed by `dotnet fsi`, creating a command-execution risk when inputs are attacker-controlled. Validate and safely encode all generated F# source, especially Package and Version.

Confidence: 98%Severity: 65%
Audit Metadata
Analyzed At
Oct 13, 2026, 04:42 AM
Package URL
pkg:socket/skills-sh/theangrybyrd%2Ffsharp-skills%2Ffsharp-verify-api%2F@44fbe0e35904c4ae982c4a96c50690fad3f149b1c541a2b00ad741881d13223e