wbso

Warn

Audited by Socket on Jun 19, 2026

1 alert found:

Anomaly
AnomalyLOW
scripts/wbso

No clear evidence of intentional malware/backdoor behavior in this bash module. However, it contains significant security anti-patterns: (1) eval-based argument parsing (direct injection surface), (2) sourcing user-writable config/env as executable shell code (high impact if tampered), and (3) privacy-sensitive output of extracted Claude/Codex prompts into stdout plus potential credential exposure if the configurable API base URL is altered. These issues warrant a careful review and hardening (remove eval, avoid sourcing where possible, minimize output, and validate base URL/permissions).

Confidence: 66%Severity: 66%
Audit Metadata
Analyzed At
Jun 19, 2026, 01:39 PM
Package URL
pkg:socket/skills-sh/wbso-ai%2Fskill%2Fwbso%2F@a03cf04d89eb0858d3ee2ac817b35c2109743ab3ef2f358ccd1feb72f6bc4710
Security Audit — socket — wbso