python-kwargs-setattr-security
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFE
Full Analysis
- [Secure Coding Guidelines]: The skill documents a secure design pattern for handling keyword arguments (kwargs) when configuring objects. It emphasizes the use of an explicit allowlist (frozenset) to restrict which attributes can be modified via dynamic reflection (setattr), effectively mitigating risks like arbitrary file writes or unauthorized function execution.- [Vulnerability Education]: The documentation explicitly identifies dangerous properties within the ONNX Runtime API, such as those that could trigger file saves or library loading, and instructs developers to exclude them from allowlists. This is a proactive security measure designed to educate agents and developers on avoiding common pitfalls in C++ extension configuration.
Audit Metadata