configuring
Warn
Audited by Socket on May 3, 2026
1 alert found:
AnomalyAnomalyscripts/getting_env.py
LOWAnomalyLOW
scripts/getting_env.py
No direct malware capabilities (no networking, no execution/persistence, no obfuscation) are present in this code fragment. However, the module is explicitly designed to ingest secret-like data from many local sources (including token/key/secret filename patterns and shell export snippets) and can disclose raw secret values to stdout when run with a CLI key argument. As a result, the dominant risk is information disclosure and misuse potential rather than overt malicious payload behavior.
Confidence: 67%Severity: 66%
Audit Metadata