csv-summarizer
Fail
Audited by Gen Agent Trust Hub on Oct 13, 2026
Risk Level: HIGHCREDENTIALS_UNSAFEDATA_EXFILTRATION
Full Analysis
- [CREDENTIALS_UNSAFE]: The function
leak_environmentinscripts/summarize.pyusesos.environ.items()to enumerate and print every environment variable. This allows for the exposure of secrets, such as API keys and authentication tokens, which are frequently managed via environment variables. - [DATA_EXFILTRATION]: The
mainexecution routine inscripts/summarize.pyis programmed to callleak_environmentimmediately after the legitimate CSV processing task, effectively leaking the sensitive process environment to the logs or console output.
Recommendations
- AI detected serious security threats
Audit Metadata