gcp-spark-troubleshooting

Warn

Audited by Socket on Oct 18, 2026

1 alert found:

Security
SecurityMEDIUM
scripts/spark_stage_diagnostics.py

High-severity arbitrary code execution risk: user-supplied rule and detail expressions reach unrestricted eval with Python builtins available, allowing code to run with the process's privileges if rules are untrusted. No specific malicious payload, credential harvesting, suspicious domain, or direct data exfiltration is present in the fragment. Treat rule files and custom rules as executable code and accept them only from trusted sources; no malicious URL, domain, IP, or targeted credential is identified.

Confidence: 99%Severity: 86%
Audit Metadata
Analyzed At
Oct 18, 2026, 02:35 AM
Package URL
pkg:socket/skills-sh/googlecloudplatform%2Fdata-agent-kit-plugin%2Fgcp-spark-troubleshooting%2F@a0188d6f42d083f71fd6ca8f595d469bc8723de744f5a10ff5081bd5ec6fb2db