telemetry-analyzer

Warn

Audited by Socket on Aug 27, 2026

1 alert found:

Anomaly
AnomalyLOW
scripts/export_traces_agentops_v3.py

The code appears to be a legitimate trace-export utility and contains no clear malware indicators. However, trace IDs are used unsafely in filesystem paths and request URLs. Validate trace IDs against an expected identifier format or use a safe basename and resolve/containment check before writing. The shown fragment also contains an incomplete final main( call, preventing execution as written.

Confidence: 97%Severity: 58%
Audit Metadata
Analyzed At
Aug 27, 2026, 10:34 AM
Package URL
pkg:socket/skills-sh/ibm%2Fibm-watsonx-orchestrate-adk%2Ftelemetry-analyzer%2F@5dab98a4f951348912ced8fb91c904dc50d9016b2c64930056bcc8e06e239afa
Security Audit — socket — telemetry-analyzer