research-pipeline-planner
Warn
Audited by Socket on Aug 28, 2026
1 alert found:
AnomalyAnomalytests/test_bounded_ct_ml_route.py
LOWAnomalyLOW
tests/test_bounded_ct_ml_route.py
The code is a test-time fixture loader with an unusual and security-sensitive design: it decodes an embedded archive, rewrites extracted source, and dynamically executes that source. This creates a potential arbitrary-code-execution risk if the packaged base64 parts are untrusted or tampered with. No direct malware behavior, exfiltration, persistence, or credential theft is visible in the supplied code. The embedded archive must be inspected before execution, and the apparent missing closing parenthesis should be verified as possible truncation.
Confidence: 94%Severity: 58%
Audit Metadata