baidu-maps-sse
Warn
Audited by Socket on Mar 10, 2026
1 alert found:
AnomalyAnomalyscripts/maps_geocode.py
LOWAnomalyLOW
scripts/maps_geocode.py
This file is a thin CLI forwarder that accepts JSON input, ensures an 'address' key exists, and forwards the payload to an external OneKeyAgentRouter service. The file itself is not overtly malicious, but it relies on an external dependency to perform network actions. Notable security concerns: a hardcoded default API key and forwarding of arbitrary user-provided JSON to a third-party router without sanitization. Audit the external dependency and remove the embedded default credential before use in sensitive environments.
Confidence: 75%Severity: 50%
Audit Metadata