develop-component

Warn

Audited by Socket on Sep 17, 2026

1 alert found:

Anomaly
AnomalyLOW
references/running-and-testing.md

The code is operational documentation for a Keboola component and does not show clear malware. It contains legitimate but important security risks: publicly binding an optional debugger, exposing sensitive values through logs or environment variables, and using eval with generated Docker login output. These practices should be restricted to trusted local or CI environments, protected from external network access, and replaced with safer argument handling where possible.

Confidence: 97%Severity: 54%
Audit Metadata
Analyzed At
Sep 17, 2026, 07:51 AM
Package URL
pkg:socket/skills-sh/keboola%2Fai-kit%2Fdevelop-component%2F@64cba76434433d9e3e694b79ab01730870b0b747827bf55b3f09ac3e86fb9ab2