ml-engineer
Warn
Audited by Socket on Sep 23, 2026
1 alert found:
AnomalyAnomalyscripts/train_sklearn.py
LOWAnomalyLOW
scripts/train_sklearn.py
The code does not show indicators of malware, data theft, backdoors, network exfiltration, or obfuscation. The main security risk is unsafe deserialization in load_model(): joblib.load() must only be used with trusted, integrity-verified model files because a malicious artifact can execute arbitrary Python code. YAML parsing is appropriately performed with safe_load().
Confidence: 98%Severity: 58%
Audit Metadata