finance-explainer

Warn

Audited by Socket on Oct 26, 2026

1 alert found:

Anomaly
AnomalyLOW
scripts/narrate_mimo.py

This is a speech-generation and audio-alignment utility that sends narration, and optionally voice-clone or QA audio, to the configured MiMo endpoint. A malicious MIMO_BASE_URL from the environment or ~/.config/ai-teardown/mimo.env can receive the MIMO_API_KEY and request content; the default endpoint is api[.]xiaomimimo[.]com. Unsanitized beat IDs can enable path traversal in output paths. These are security risks, but the fragment provides no clear evidence of intentional malware.

Confidence: 98%Severity: 57%
Audit Metadata
Analyzed At
Oct 26, 2026, 05:33 AM
Package URL
pkg:socket/skills-sh/andyhuo520%2Fdigital-human-koubo%2Ffinance-explainer%2F@200b88bd7cdc94f8522479a97dd35595dcaa1253f9e8203cedee5c36b4b66d48