byted-bp-seedance-viral-creative-rewrite-skill

Warn

Audited by Socket on Sep 9, 2026

1 alert found:

Anomaly
AnomalyLOW
scripts/media_cache.py

The code implements ordinary remote-file caching and contains no clear malicious behavior. Its main security concerns are SSRF when url is attacker-controlled, path traversal or absolute-path escape through unvalidated subdir/filename_hint values, and unrestricted download size. Validate URL schemes and destinations, constrain path components to safe names beneath cache_root, and enforce a response-size limit. The provided text is syntactically incomplete due to a missing closing parenthesis.

Confidence: 98%Severity: 58%
Audit Metadata
Analyzed At
Sep 9, 2026, 08:51 AM
Package URL
pkg:socket/skills-sh/bytedance%2Fagentkit-samples%2Fbyted-bp-seedance-viral-creative-rewrite-skill%2F@62910d1f2ccee9305f431f786ef8f8743c320542d06d9f09455d94e6df2debd8