configuring

Warn

Audited by Socket on May 3, 2026

1 alert found:

Anomaly
AnomalyLOW
scripts/getting_env.py

No direct malware capabilities (no networking, no execution/persistence, no obfuscation) are present in this code fragment. However, the module is explicitly designed to ingest secret-like data from many local sources (including token/key/secret filename patterns and shell export snippets) and can disclose raw secret values to stdout when run with a CLI key argument. As a result, the dominant risk is information disclosure and misuse potential rather than overt malicious payload behavior.

Confidence: 67%Severity: 66%
Audit Metadata
Analyzed At
May 3, 2026, 01:16 PM
Package URL
pkg:socket/skills-sh/oaustegard%2Fclaude-skills%2Fconfiguring%2F@fcfcdb3ec15cf5186928b09dda00907c3c557986