fsharp-verify-api
Warn
Audited by Socket on Oct 13, 2026
1 alert found:
AnomalyAnomalyscripts/show-api.ps1
LOWAnomalyLOW
scripts/show-api.ps1
The code appears intended as an API-inspection wrapper, not malware. However, untrusted parameter values can inject F# source into the script executed by `dotnet fsi`, creating a command-execution risk when inputs are attacker-controlled. Validate and safely encode all generated F# source, especially Package and Version.
Confidence: 98%Severity: 65%
Audit Metadata