wbso-logout
Warn
Audited by Socket on Jun 17, 2026
1 alert found:
AnomalyAnomalyscripts/wbso
LOWAnomalyLOW
scripts/wbso
No clear evidence of intentional malware/backdoor behavior in this bash module. However, it contains significant security anti-patterns: (1) eval-based argument parsing (direct injection surface), (2) sourcing user-writable config/env as executable shell code (high impact if tampered), and (3) privacy-sensitive output of extracted Claude/Codex prompts into stdout plus potential credential exposure if the configurable API base URL is altered. These issues warrant a careful review and hardening (remove eval, avoid sourcing where possible, minimize output, and validate base URL/permissions).
Confidence: 100%Severity: 60%
Audit Metadata