game-balance-and-bots
Warn
Audited by Socket on Oct 18, 2026
1 alert found:
AnomalyAnomalytemplates/test/sims/write-sim-report.ts
LOWAnomalyLOW
templates/test/sims/write-sim-report.ts
This utility fingerprints project files and writes simulation reports. Caller-controlled gameId values can cause path traversal in file enumeration and report writes; the write path may escape the intended reports directory and potentially root. This is a conditional filesystem security risk, not evidence of malware; no network exfiltration or other malicious behavior is present.
Confidence: 97%Severity: 55%
Audit Metadata