Deep Search
Fail
Audited by Socket on Mar 7, 2026
1 alert found:
Obfuscated FileObfuscated Filescripts/deep_search.py
HIGHObfuscated FileHIGH
scripts/deep_search.py
Not outright malicious, but contains clear security and privacy issues: hardcoded Langfuse keys and default host, telemetry that exfiltrates user queries and model outputs when tracing is available, broad exception swallowing, and a syntax bug at the file end. Recommended actions before use: remove embedded secrets, require explicit opt-in for telemetry, avoid defaulting tracing host/keys in source, log less sensitive output or redact queries in logs, fix the syntax error, and surface errors rather than silently swallowing them. Treat as privacy-sensitive code and audit any Langfuse credentials for unauthorized use.
Confidence: 98%
Audit Metadata