gempy

Warn

Audited by Socket on Sep 27, 2026

1 alert found:

Security
SecurityMEDIUM
scripts/export_model.py

The code is a model export utility with no evident network exfiltration or other malware behavior. Do not load untrusted `.pkl` files: `pickle.load` can execute arbitrary code. Surface names should also be sanitized and output paths constrained to the chosen directory before OBJ files are written.

Confidence: 99%Severity: 78%
Audit Metadata
Analyzed At
Sep 27, 2026, 01:48 PM
Package URL
pkg:socket/skills-sh/steadfastasart%2Fgeoscience-skills%2Fgempy%2F@c3147312de1b80166351c835c1e4bb32fbeb2825be04896308fd01fa994f94b9