mem
Audited by Socket on Sep 8, 2026
1 alert found:
AnomalyNo direct malware indicators (like network exfiltration, credential theft, or process execution) are present in this module. However, it executes template-based generation via copier with unsafe=True and loads schema/templates from filesystem locations that may be influenced by user-controlled references (schema-path, schema_name, children_from.path). Additionally, generated output paths derive from rendered segments without explicit traversal/character restriction. Overall, this is not clearly malicious code by itself, but it has significant risk of abuse/sabotage in untrusted-input scenarios and should be reviewed and constrained (trust boundaries, path sanitization, avoid unsafe=True, and restrict schema/template locations).