dream

Warn

Audited by Socket on Oct 2, 2026

1 alert found:

Anomaly
AnomalyLOW
references/safe-deletes.md

The code describes legitimate recovery controls and contains no clear malware or intentional supply-chain attack. The primary security concern is unsafe shell-command construction from interpolated memory_dir and path values; use argument-array APIs or robust shell escaping and validate that paths remain within the intended memory directory. The rm -rf sweep and incomplete collision-handling example also warrant careful implementation testing.

Confidence: 97%Severity: 58%
Audit Metadata
Analyzed At
Oct 2, 2026, 03:47 AM
Package URL
pkg:socket/skills-sh/yonatangross%2Forchestkit%2Fdream%2F@1e34f194ba78b107cdd5980db4d3affe5c24dd07da8d156a7395ed9e5e4ef07a