yolo-master-agent
Warn
Audited by Socket on Oct 12, 2026
1 alert found:
AnomalyAnomalyruntime/cli/contract.py
LOWAnomalyLOW
runtime/cli/contract.py
No clear malicious behavior is present. The code provides usage summarization, cost estimation, redaction, and manifest persistence. Untrusted path components can potentially cause directory creation and manifest writes outside the intended location, and provider values may influence YAML file reads outside the provider configuration directory. Validate and constrain these paths before use.
Confidence: 96%Severity: 58%
Audit Metadata