sbox

Warn

Audited by Socket on Mar 5, 2026

1 alert found:

Anomaly
AnomalyLOW
apps/fumadocs/src/app/api/v1/tools/[toolName]/route.ts

The endpoint is a conventional and valid pattern for dispatching to a tool registry with input validation on the tool name. The primary risk stems from the executeAgentTool implementation and whether tools are sandboxed, permissioned, and auditable. Ensure strong authorization, tool isolation, input constraints per tool, and robust auditing. Implement rate limiting and explicit error handling to avoid information leakage.

Confidence: 68%Severity: 60%
Audit Metadata
Analyzed At
Mar 5, 2026, 05:42 PM
Package URL
pkg:socket/skills-sh/suiramdev%2Fsdocs%2Fsbox%2F@023e07236bc14fce6a276c4b4aeecf49b90f93f4