klingai-team-setup

Warn

Audited by Socket on Sep 9, 2026

1 alert found:

Anomaly
AnomalyLOW
references/team-configuration.md

The code is a straightforward local team-configuration manager and contains no evident malware or exfiltration behavior. It does persist project API keys in plaintext and permits arbitrary configuration-file paths, which can enable sensitive-file disclosure or overwriting if untrusted callers can invoke the class. Authentication and input/path validation are absent, so the module should only be used with trusted callers and protected configuration files.

Confidence: 98%Severity: 58%
Audit Metadata
Analyzed At
Sep 9, 2026, 03:51 AM
Package URL
pkg:socket/skills-sh/jeremylongshore%2Ftons-of-skills-marketplace%2Fklingai-team-setup%2F@10c0aef520239a62bf15cc478173f3b46100adafccd2a8b6a09aadb6a26a18f9
Security Audit — socket — klingai-team-setup