nestjs-drizzle-crud-generator

Warn

Audited by Socket on Sep 14, 2026

1 alert found:

Anomaly
AnomalyLOW
scripts/generate_crud.py

This is a source-code generator with no evident malware behavior. It performs local template reads and filesystem writes as expected for its purpose. However, it trusts command-line and JSON field data when constructing paths and TypeScript source, creating a moderate risk of path traversal, unintended file overwrite, and generated-code injection when invoked with untrusted input. Inputs should be restricted to validated identifiers, safe output directories, and properly escaped/generated literals.

Confidence: 98%Severity: 57%
Audit Metadata
Analyzed At
Sep 14, 2026, 09:09 PM
Package URL
pkg:socket/skills-sh/giuseppe-trisciuoglio%2Fdeveloper-kit%2Fnestjs-drizzle-crud-generator%2F@8f38516ab56deb4fcd9f726fc9949fc6ba5fa466068d23a90f8ea89a23fb90e4
Security Audit — socket — nestjs-drizzle-crud-generator