wandb-primary
Warn
Audited by Socket on Oct 13, 2026
1 alert found:
AnomalyAnomalyscripts/launch_helpers_impl.py
LOWAnomalyLOW
scripts/launch_helpers_impl.py
No direct malicious behavior is evident in the provided code. It is a W&B/Kubernetes job orchestration utility with expected network access, artifact handling, and remote code execution through submitted jobs. Security risk is materially elevated when untrusted users control job inputs, container images, requirements, artifacts, queues, or secret mappings. The fragment is also syntactically incomplete, so the omitted GraphQL queries and surrounding code should be reviewed before deployment.
Confidence: 96%Severity: 58%
Audit Metadata