view-note
Warn
Audited by Socket on Mar 1, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
The original concept is sound for a note-view feature, but the risk lies in unsafely interpolating user input into shell commands. Implementing proper quoting and basic input validation substantially reduces risk while preserving usability. The overall risk remains low to moderate with recommended mitigations implemented.
Confidence: 75%Severity: 75%
Audit Metadata