long-document-evidence-reader

Warn

Audited by Socket on Oct 4, 2026

2 alerts found:

AnomalySecurity
AnomalyLOW
scripts/rlm_runner.py

No direct malware behavior is evident in this fragment. The principal security concern is execution of model-generated Python code and exposure of context through model requests; safety depends on the omitted REPL sandbox and deployment controls. The pasted structure also appears defective due to indentation and a missing return.

Confidence: 96%Severity: 55%
SecurityMEDIUM
scripts/rlm_repl.py

No overt malware or data exfiltration behavior is present in the fragment. The main security concern is direct execution of caller-supplied code in the current process. This is unsafe when inputs are untrusted; the limited builtins and stdout truncation do not provide a security boundary.

Confidence: 99%Severity: 78%
Audit Metadata
Analyzed At
Oct 4, 2026, 03:03 PM
Package URL
pkg:socket/skills-sh/allanyiin%2Famon%2Flong-document-evidence-reader%2F@04bbc236b8533af205ea99bc1749785bf0661c80b33008a7cfcac01cf64be5d5