cohort-analysis
Audited by Socket on Feb 27, 2026
1 alert found:
Obfuscated FileFunctional cohort analysis workflow with reasonable purposes (cohort segmentation, retention matrices, LTV calculation, recommendations). No direct indicators of embedded malware or obfuscated/malicious code in the provided fragment. Primary risks are supply-chain and operational: unspecified agent behaviors, unclear credential handling, unvetted persistence script (churn-predictor.py), and broad data access scope that includes PII and transaction history. Recommendations: require documented, direct-to-official-API auth flows (OAuth with limited scopes or short-lived tokens), avoid giving agents persistent credentials, provide/vet churn-predictor.py or include its logic inline, minimize requested fields (principle of least privilege), encrypt sensitive config and outputs, and enforce logging/audit of data access and retention policies.