platform-metadata-api-context-get
Warn
Audited by Socket on Aug 7, 2026
1 alert found:
SecuritySecurityassets/metadata_api/ConnectedApp.json
MEDIUMSecurityMEDIUM
assets/metadata_api/ConnectedApp.json
This snippet is not evidence of active malware execution, but it is high-sensitivity OAuth/SAML configuration that embeds credential-like secrets and certificates directly, alongside several security-relevant policy choices (notably infinite refresh tokens) and multiple HTTP URLs in authentication/federation contexts. Treat as a significant supply-chain/secret-exposure and auth-configuration hygiene risk, especially if these values are real and included in any published artifact or repository.
Confidence: 62%Severity: 72%
Audit Metadata