bash-cli-framework
Audited by Socket on Feb 16, 2026
1 alert found:
Malware[Skill Scanner] Destructive bash command detected (rm -rf, chmod 777) Benign: The code represents a legitimate Bash CLI framework intended for consistent formatting, logging, and error handling. No malicious data flows, no credential handling, and no external calls observed. The main improvement opportunity is consolidating the scattered fragments into a single, cohesive module to reduce duplication and potential misuses (e.g., eval in examples). LLM verification: This skill is a benign CLI utility framework, but it contains a few high-impact risky patterns (eval in assert() and an unconditional rm -rf of TEMP_DIR during cleanup) that could lead to command injection or destructive file deletion if downstream scripts or environment variables are misused. There is no evidence of exfiltration, obfuscation, or network-based malicious behavior in the provided fragment. Consumers should sanitize inputs, avoid passing untrusted strings into assert(), and harden