adf-ml-analytics

Warn

Audited by Socket on Sep 20, 2026

1 alert found:

Security
SecurityMEDIUM
references/sql-archival-patterns.md

The fragment is primarily legitimate Azure SQL ML and archival automation, with no clear malicious payload or obfuscation. Security concerns are significant: unsafe pickle deserialization, SQL injection exposure from unvalidated dynamic archive parameters, broad sensitive-data export, and a caller-controlled HTTP logging destination. Restrict model and pipeline parameter write access, validate and quote identifiers, parameterize values, constrain the logging endpoint, and enforce storage encryption, ACLs, and retention.

Confidence: 94%Severity: 72%
Audit Metadata
Analyzed At
Sep 20, 2026, 02:18 AM
Package URL
pkg:socket/skills-sh/josiahsiegel%2Fclaude-plugin-marketplace%2Fadf-ml-analytics%2F@23e423c6916d318022eca415929c007c20852edded3c4d6bc0dc01f96a3530e7