klingai-team-setup
Warn
Audited by Socket on Sep 9, 2026
1 alert found:
AnomalyAnomalyreferences/team-configuration.md
LOWAnomalyLOW
references/team-configuration.md
The code is a straightforward local team-configuration manager and contains no evident malware or exfiltration behavior. It does persist project API keys in plaintext and permits arbitrary configuration-file paths, which can enable sensitive-file disclosure or overwriting if untrusted callers can invoke the class. Authentication and input/path validation are absent, so the module should only be used with trusted callers and protected configuration files.
Confidence: 98%Severity: 58%
Audit Metadata