PkgRadar

PyPI · pypi.org

agentstracer

Credential file access: matched "aws_secret_access_key"

Why PkgRadar flagged 1.0.3

SeveritySignalEvidence
highCredential file accessmatched "aws_secret_access_key" · agentstracer-1.0.3/agentstracer/secrets.py

Scanned versions

VersionVerdictScoreScanned (UTC)
1.0.3High risk302026-06-06

Block this in CI

PkgRadar gates agentstracer (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem pypi agentstracer==1.0.3