oa-daily-report

Warn

Audited by Socket on Oct 9, 2026

1 alert found:

Anomaly
AnomalyLOW
scripts/remove_reminder.ps1

代码用于删除指定的 Windows 计划任务。未发现明确恶意行为,但将可控任务名传入 Invoke-Expression 存在命令注入风险。应避免动态执行,改用直接调用 schtasks 并以参数数组传参。

Confidence: 98%Severity: 65%
Audit Metadata
Analyzed At
Oct 9, 2026, 09:39 AM
Package URL
pkg:socket/skills-sh/xiao0916%2Flm-skills%2Foa-daily-report%2F@125c9b20ba10311ebf0f0915b874e97b3e3862c8a4eb474c332af6851a968abe