long-document-evidence-reader
Warn
Audited by Socket on Oct 4, 2026
2 alerts found:
AnomalySecurityAnomalyscripts/rlm_runner.py
LOWAnomalyLOW
scripts/rlm_runner.py
No direct malware behavior is evident in this fragment. The principal security concern is execution of model-generated Python code and exposure of context through model requests; safety depends on the omitted REPL sandbox and deployment controls. The pasted structure also appears defective due to indentation and a missing return.
Confidence: 96%Severity: 55%
Securityscripts/rlm_repl.py
MEDIUMSecurityMEDIUM
scripts/rlm_repl.py
No overt malware or data exfiltration behavior is present in the fragment. The main security concern is direct execution of caller-supplied code in the current process. This is unsafe when inputs are untrusted; the limited builtins and stdout truncation do not provide a security boundary.
Confidence: 99%Severity: 78%
Audit Metadata