maths

Warn

Audited by Socket on Sep 20, 2026

2 alerts found:

Anomalyx2
AnomalyLOW
scripts/sympy_solve.py

The fragment is a simple command-line equation solver with no evident malicious behavior. However, passing unrestricted user input to sp.sympify() can enable arbitrary expression evaluation or code execution in affected configurations. Treat command-line expressions as trusted only, or replace this with a restricted parser and strict mathematical-input validation.

Confidence: 96%Severity: 62%
AnomalyLOW
scripts/sympy_integrate.py

The code is a small symbolic integration utility with no evidence of intentional malware, data theft, or system compromise. Its main security issue is unsafe use of sp.sympify with untrusted command-line input, potentially allowing unintended expression evaluation, plus denial-of-service risk from unrestricted symbolic integration. Use a strict mathematical grammar or validated parser and impose resource limits before processing untrusted input.

Confidence: 94%Severity: 62%
Audit Metadata
Analyzed At
Sep 20, 2026, 07:04 PM
Package URL
pkg:socket/skills-sh/udnisap%2Fskills%2Fmaths%2F@55d687df811f69577dc0fb0dff9d357e2ad27a7080bd525281eabc5f60fb4e12
Security Audit — socket — maths