byted-bp-seedance-viral-creative-rewrite-skill
Warn
Audited by Socket on Sep 9, 2026
1 alert found:
AnomalyAnomalyscripts/media_cache.py
LOWAnomalyLOW
scripts/media_cache.py
The code implements ordinary remote-file caching and contains no clear malicious behavior. Its main security concerns are SSRF when url is attacker-controlled, path traversal or absolute-path escape through unvalidated subdir/filename_hint values, and unrestricted download size. Validate URL schemes and destinations, constrain path components to safe names beneath cache_root, and enforce a response-size limit. The provided text is syntactically incomplete due to a missing closing parenthesis.
Confidence: 98%Severity: 58%
Audit Metadata