ab-test-analysis

Warn

Audited by Socket on Oct 29, 2026

1 alert found:

Anomaly
AnomalyLOW
scripts/ab_test_stats.py

This is an A/B testing analysis CLI with no evident data exfiltration or destructive behavior. The main security concern is import-time execution of the executable named in the adjacent .resolved_python file, or a Python executable under CACHE_DIR, followed by adding reported site-packages directories to sys.path. This is a conditional local code-execution and import-integrity risk if those paths are attacker-controlled or writable; severity is moderate. Relevant indicators are .resolved_python, CACHE_DIR, AB_TEST_NO_SCIPY, and the fallback path under the system temporary directory named ab-test-analysis; no URLs, domains, IPs, or targeted credentials appear.

Confidence: 96%Severity: 56%
Audit Metadata
Analyzed At
Oct 29, 2026, 02:10 AM
Package URL
pkg:socket/skills-sh/thinkingaiagenticengine%2Fscenario-skills%2Fab-test-analysis%2F@ba479c8d67df8c6aa7806f87befb938fa39f12f2