vietnamese-landing-copy

Warn

Audited by Socket on Sep 4, 2026

1 alert found:

Anomaly
AnomalyLOW
scripts/validate_copy.py

No direct malware behaviors (no networking, no shell/process execution, no credential theft) were found in this fragment. The primary security risk is supply-chain/abuse via dynamic loading and execution of any rules_*.py modules from SCRIPT_DIR using exec_module() with no validation, plus regex patterns compiled from reference markdown that could cause resource exhaustion. These mechanisms could be exploited for sabotage if an attacker can influence package contents or the rules/reference files.

Confidence: 72%Severity: 62%
Audit Metadata
Analyzed At
Sep 4, 2026, 07:26 AM
Package URL
pkg:socket/skills-sh/trussary%2Fvietnamese-language-skill%2Fvietnamese-landing-copy%2F@1e88640468efe302096d7358b0fcce6d6fffc34e40d241c2befe939e6c1e81ec
Security Audit — socket — vietnamese-landing-copy