telemetry-analyzer
Warn
Audited by Socket on Aug 27, 2026
1 alert found:
AnomalyAnomalyscripts/export_traces_agentops_v3.py
LOWAnomalyLOW
scripts/export_traces_agentops_v3.py
The code appears to be a legitimate trace-export utility and contains no clear malware indicators. However, trace IDs are used unsafely in filesystem paths and request URLs. Validate trace IDs against an expected identifier format or use a safe basename and resolve/containment check before writing. The shown fragment also contains an incomplete final main( call, preventing execution as written.
Confidence: 97%Severity: 58%
Audit Metadata