c-string-and-buffer-safety

Warn

Audited by Socket on Oct 3, 2026

1 alert found:

Anomaly
AnomalyLOW
examples/bad/strcpy_bad.c

The code contains clear buffer-overflow defects in strcpy and strcat. The demonstrated input is hardcoded, and there is no evidence of malware, data exfiltration, or other malicious behavior. If adapted to accept external input, the unchecked writes could enable memory corruption.

Confidence: 99%Severity: 64%
Audit Metadata
Analyzed At
Oct 3, 2026, 10:22 PM
Package URL
pkg:socket/skills-sh/trothbyte%2Flow-level-skills-trothbyte%2Fc-string-and-buffer-safety%2F@88874e076284f61b6094adf2e383646786988e15e2cf92ec4982ccc0f837f565