ab-test-analysis
Warn
Audited by Socket on Oct 29, 2026
1 alert found:
AnomalyAnomalyscripts/ab_test_stats.py
LOWAnomalyLOW
scripts/ab_test_stats.py
This is an A/B testing analysis CLI with no evident data exfiltration or destructive behavior. The main security concern is import-time execution of the executable named in the adjacent .resolved_python file, or a Python executable under CACHE_DIR, followed by adding reported site-packages directories to sys.path. This is a conditional local code-execution and import-integrity risk if those paths are attacker-controlled or writable; severity is moderate. Relevant indicators are .resolved_python, CACHE_DIR, AB_TEST_NO_SCIPY, and the fallback path under the system temporary directory named ab-test-analysis; no URLs, domains, IPs, or targeted credentials appear.
Confidence: 96%Severity: 56%
Audit Metadata