baidu-maps-sse

Warn

Audited by Socket on Mar 10, 2026

1 alert found:

Anomaly
AnomalyLOW
scripts/maps_geocode.py

This file is a thin CLI forwarder that accepts JSON input, ensures an 'address' key exists, and forwards the payload to an external OneKeyAgentRouter service. The file itself is not overtly malicious, but it relies on an external dependency to perform network actions. Notable security concerns: a hardcoded default API key and forwarding of arbitrary user-provided JSON to a third-party router without sanitization. Audit the external dependency and remove the embedded default credential before use in sensitive environments.

Confidence: 75%Severity: 50%
Audit Metadata
Analyzed At
Mar 10, 2026, 08:46 AM
Package URL
pkg:socket/skills-sh/aiagenta2z%2Fonekey-agent-router%2Fbaidu-maps-sse%2F@3460b1a0e874be41bbe36ed06321a7bb178797eb
Security Audit — socket — baidu-maps-sse