math

Warn

Audited by Socket on Oct 22, 2026

1 alert found:

Security
SecurityMEDIUM
scripts/run.py

No clear malware behavior is evident. However, the expression-parsing paths through SymPy sympify and especially eval in op_z3solve create substantial code-execution risk if inputs are untrusted. Use a restricted mathematical grammar or safe parser rather than eval/sympify for hostile input, and constrain batch file paths where appropriate.

Confidence: 98%Severity: 82%
Audit Metadata
Analyzed At
Oct 22, 2026, 07:43 PM
Package URL
pkg:socket/skills-sh/worrrrrr%2Fagent-skills%2Fmath%2F@e8e5b95ab7481be80b8a6f97bde4fcdda1740cf1e0f7c8410f36627c092ad5a3