sf-permissions
Warn
Audited by Socket on Sep 14, 2026
1 alert found:
AnomalyAnomalyscripts/permission_exporter.py
LOWAnomalyLOW
scripts/permission_exporter.py
The code appears intended to export Salesforce permission-set information. No evidence of malware or intentional data theft is present. It contains a likely SOQL injection risk from unescaped query parameters, an unrestricted file-write/overwrite risk through output_path, and substantial implementation errors caused by malformed function structure and missing helpers. The fragment is likely nonfunctional as provided, but should be repaired and inputs escaped or safely parameterized before use.
Confidence: 98%Severity: 57%
Audit Metadata