repomix-unmixer
Warn
Audited by Socket on Sep 15, 2026
1 alert found:
SecuritySecurityscripts/unmix_repomix.py
MEDIUMSecurityMEDIUM
scripts/unmix_repomix.py
The code is a file extraction utility with no clear malicious behavior, but it has a significant path traversal and arbitrary file overwrite risk because embedded paths are trusted. Treat repomix input as untrusted and validate that resolved output paths remain within the chosen output directory. The incomplete final main( also indicates a syntax error if present literally.
Confidence: 98%Severity: 70%
Audit Metadata