projects
Warn
Audited by Socket on Oct 27, 2026
1 alert found:
AnomalyAnomalyreferences/admin-tooling.md
LOWAnomalyLOW
references/admin-tooling.md
No clear malware or intentional supply-chain attack is present. The code is an administrative tooling example with meaningful deployment and output-handling risks: the unauthenticated Flask dashboard exposes project operations and SDK keys, debug mode should not be used in production, and Terraform output should escape project data. Treat keys and generated files as sensitive.
Confidence: 97%Severity: 55%
Audit Metadata