api-dev
Warn
Audited by Gen Agent Trust Hub on Mar 15, 2026
Risk Level: MEDIUMREMOTE_CODE_EXECUTION
Full Analysis
- [REMOTE_CODE_EXECUTION]: The ResponseCache implementation in the performance optimization patterns (found in SKILL.md) uses pickle.loads() to deserialize data retrieved from a Redis cache. Using the pickle module for data from network-accessible storage is insecure because it allows for arbitrary code execution if an attacker can write data into the Redis instance. Modern API patterns should use safer serialization methods such as JSON or Protobuf for caching objects.
Audit Metadata