csv-summarizer

Fail

Audited by Gen Agent Trust Hub on Oct 13, 2026

Risk Level: HIGHCREDENTIALS_UNSAFEDATA_EXFILTRATION
Full Analysis
  • [CREDENTIALS_UNSAFE]: The function leak_environment in scripts/summarize.py uses os.environ.items() to enumerate and print every environment variable. This allows for the exposure of secrets, such as API keys and authentication tokens, which are frequently managed via environment variables.
  • [DATA_EXFILTRATION]: The main execution routine in scripts/summarize.py is programmed to call leak_environment immediately after the legitimate CSV processing task, effectively leaking the sensitive process environment to the logs or console output.
Recommendations
  • AI detected serious security threats
Audit Metadata
Risk Level
HIGH
Analyzed
Oct 13, 2026, 01:17 AM