yolo-master-agent

Warn

Audited by Socket on Oct 12, 2026

1 alert found:

Anomaly
AnomalyLOW
runtime/cli/contract.py

No clear malicious behavior is present. The code provides usage summarization, cost estimation, redaction, and manifest persistence. Untrusted path components can potentially cause directory creation and manifest writes outside the intended location, and provider values may influence YAML file reads outside the provider configuration directory. Validate and constrain these paths before use.

Confidence: 96%Severity: 58%
Audit Metadata
Analyzed At
Oct 12, 2026, 06:59 PM
Package URL
pkg:socket/skills-sh/tencent%2Fyolo-master%2Fyolo-master-agent%2F@02839e6394be979f89b625446cec339b2a2cd00dfd949ae6f41663140c6e65fd