auth-and-secure-storage
Warn
Audited by Socket on Oct 18, 2026
1 alert found:
AnomalyAnomalytests/bases/app/skills/planted/leak.ts
LOWAnomalyLOW
tests/bases/app/skills/planted/leak.ts
The function exposes the supplied access token by writing it to console logs, which is a credential-handling security risk. The SecureStore read has no observable effect in this fragment, and there is no evidence of network exfiltration or broader malware behavior. Severity is moderate for applications that invoke this function with real credentials.
Confidence: 99%Severity: 55%
Audit Metadata