esm
Warn
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: MEDIUMDYNAMIC_EXECUTION
Full Analysis
- [DYNAMIC_EXECUTION]: The reference files references/esm-c-api.md and references/forge-api.md contain example implementations of EmbeddingCache, CheckpointedBatchProcessor, and ForgeCache that utilize pickle.load() to load local cache and checkpoint files. Python's pickle module is inherently unsafe for deserializing data because it can execute arbitrary code embedded within the serialized stream if an attacker gains write access to the local cache files.
Audit Metadata