ai-ml-principal-engineer

Warn

Audited by Socket on Sep 18, 2026

1 alert found:

Security
SecurityMEDIUM
references/mlops.md

No clear malware or intentional sabotage is present in the shown fragment. The highest-risk issue is loading untrusted or tampered joblib and TorchScript model artifacts, which can lead to code execution during startup or inference. Hardcoded MLflow/PostgreSQL credentials, unauthenticated network services, unrestricted batch input, direct error disclosure, and mutable CI/dependency references create significant security weaknesses that should be remediated. Assessment is limited to the displayed portion.

Confidence: 95%Severity: 78%
Audit Metadata
Analyzed At
Sep 18, 2026, 07:51 AM
Package URL
pkg:socket/skills-sh/modra40%2Fclaude-codex-skills-directory%2Fai-ml-principal-engineer%2F@3dde7f09822e758f600ad7bfaa1b3a3aab2efefad9ad4c0d19ee2a84f8480409