minimal-run-and-audit
Warn
Audited by Socket on May 9, 2026
1 alert found:
AnomalyAnomalyscripts/write_outputs.py
LOWAnomalyLOW
scripts/write_outputs.py
This code is a thin, dynamic execution wrapper that computes a path from __file__, loads a specific on-disk Python file, and executes it via exec_module. The fragment shows no direct malicious payload (no exfiltration/credential theft/network actions), but it introduces a meaningful supply-chain integrity risk because it executes code from an external file without validation. Risk depends entirely on the trustworthiness and immutability of shared/scripts/write_run_bundle.py and how safely it is delivered in the build/install process.
Confidence: 62%Severity: 60%
Audit Metadata