pre-trade-discipline-gate
Warn
Audited by Socket on Sep 5, 2026
1 alert found:
AnomalyAnomalyscripts/check_pre_trade_discipline.py
LOWAnomalyLOW
scripts/check_pre_trade_discipline.py
No obvious data theft or network-based malware behavior is present. The main security concern is supply-chain/code-integrity risk: the module dynamically loads and executes trader-memory-core/scripts/thesis_store.py at runtime via exec_module, and then uses it to link reports. If that file (or its path resolution) can be tampered with, this enables arbitrary code execution during pre-trade evaluation. Filesystem read/write operations are also driven by CLI-provided paths.
Confidence: 66%Severity: 55%
Audit Metadata