ml-engineer

Warn

Audited by Socket on Sep 23, 2026

1 alert found:

Anomaly
AnomalyLOW
scripts/train_sklearn.py

The code does not show indicators of malware, data theft, backdoors, network exfiltration, or obfuscation. The main security risk is unsafe deserialization in load_model(): joblib.load() must only be used with trusted, integrity-verified model files because a malicious artifact can execute arbitrary Python code. YAML parsing is appropriately performed with safe_load().

Confidence: 98%Severity: 58%
Audit Metadata
Analyzed At
Sep 23, 2026, 08:06 AM
Package URL
pkg:socket/skills-sh/xgaisystems%2Fclaude-supercode-skills-404kidwiz%2Fml-engineer%2F@d32e2d64ae5bc9bdb6eaf0e741ae02d647992422fe0cdf12951f82fc1b8211fa
Security Audit — socket — ml-engineer