finance-explainer
Warn
Audited by Socket on Oct 26, 2026
1 alert found:
AnomalyAnomalyscripts/narrate_mimo.py
LOWAnomalyLOW
scripts/narrate_mimo.py
This is a speech-generation and audio-alignment utility that sends narration, and optionally voice-clone or QA audio, to the configured MiMo endpoint. A malicious MIMO_BASE_URL from the environment or ~/.config/ai-teardown/mimo.env can receive the MIMO_API_KEY and request content; the default endpoint is api[.]xiaomimimo[.]com. Unsanitized beat IDs can enable path traversal in output paths. These are security risks, but the fragment provides no clear evidence of intentional malware.
Confidence: 98%Severity: 57%
Audit Metadata