ai-marketing-videos
Audited by Socket on Jul 16, 2026
1 alert found:
SecurityNo confirmed intent to deploy stealth malware (backdoors/exfiltration routines) is visible in the provided artifact because it is documentation/metadata. However, the quick-start includes a critical supply-chain vulnerability pattern: it instructs users to download a remote script and execute it directly with `sh` (curl -fsSL ... | sh). This should be treated as unacceptable for security-sensitive environments and replaced with a verified installation approach (pinned package, checksum/signature verification, or vendor-provided installer instructions without piping to shell). Treat inference/login usage as a privacy consideration since prompts/campaign content will likely be transmitted to upstream services.