personalization
Audited by Socket on Mar 4, 2026
1 alert found:
Obfuscated FileNo direct indicators of intentional malware or supply-chain backdoor in this file. Primary security concerns are privacy and data exposure: the script reads PII from Personize, sends it into AI endpoints, persists AI outputs back into Personize memory, and can post sensitive outputs to an external Slack webhook. Operational recommendations: treat PERSONIZE_SECRET_KEY and SLACK_WEBHOOK_URL as secrets (store in a secret manager), review and limit what customer data is sent to AI endpoints, audit retention of client.memory.memorize() outputs, protect .health-check-state.json (avoid committing to source control, restrict filesystem permissions), and consider redacting or minimizing PII in messages and memorized content. If Slack integration is enabled, ensure the webhook target is trusted and access to that workspace is controlled.