spanora-setup
Warn
Audited by Socket on Sep 15, 2026
1 alert found:
AnomalyAnomalyreferences/langchain-python.md
LOWAnomalyLOW
references/langchain-python.md
The code describes legitimate OpenTelemetry integration, but it intentionally exports detailed LLM and tool telemetry, including potentially sensitive prompts, outputs, metadata, and identifiers, to a third-party endpoint. This represents a meaningful data-disclosure and privacy risk unless the endpoint, retention, access controls, and content-capture settings are trusted and properly configured. No clear malware or backdoor behavior is present in the supplied fragment.
Confidence: 96%Severity: 62%
Audit Metadata