data-autocleaning
Warn
Audited by Socket on Oct 3, 2026
1 alert found:
SecuritySecurityscripts/dataplex_scanner.py
MEDIUMSecurityMEDIUM
scripts/dataplex_scanner.py
The code performs an understandable cloud data-profiling task, but its use of shell commands built from untrusted CLI arguments creates a command-injection risk. The table-derived output filename also permits path traversal if identifiers contain path separators. Use subprocess APIs with argument lists and validate or constrain identifiers and output paths.
Confidence: 98%Severity: 75%
Audit Metadata