dream

Warn

Audited by Socket on Sep 17, 2026

1 alert found:

Anomaly
AnomalyLOW
references/safe-deletes.md

The code describes legitimate recovery controls and contains no clear malware or intentional supply-chain attack. The primary security concern is unsafe shell-command construction from interpolated memory_dir and path values; use argument-array APIs or robust shell escaping and validate that paths remain within the intended memory directory. The rm -rf sweep and incomplete collision-handling example also warrant careful implementation testing.

Confidence: 97%Severity: 58%
Audit Metadata
Analyzed At
Sep 17, 2026, 02:17 AM
Package URL
pkg:socket/skills-sh/yonatangross%2Forchestkit%2Fdream%2F@2d427f75e107cb5f7b2e0098cf6fe94fd82c47dd313c726a414873a2e22c78ba
Security Audit — socket — dream