math
Warn
Audited by Socket on Oct 22, 2026
1 alert found:
SecuritySecurityscripts/run.py
MEDIUMSecurityMEDIUM
scripts/run.py
No clear malware behavior is evident. However, the expression-parsing paths through SymPy sympify and especially eval in op_z3solve create substantial code-execution risk if inputs are untrusted. Use a restricted mathematical grammar or safe parser rather than eval/sympify for hostile input, and constrain batch file paths where appropriate.
Confidence: 98%Severity: 82%
Audit Metadata