byted-outbound-call
Warn
Audited by Socket on Sep 21, 2026
1 alert found:
AnomalyAnomalyscripts/volc/volc_openai.py
LOWAnomalyLOW
scripts/volc/volc_openai.py
The code is primarily a Volcengine API client implementing HMAC authentication. It does not show clear malware, persistence, command execution, or covert network exfiltration. However, the direct execution path deliberately prints VOLCENGINE_SECRET_KEY and sends hardcoded personal data to the Volcengine service. Credential printing should be removed, sensitive sample data should be replaced, and the unreachable sys.exit(1) should be reviewed.
Confidence: 98%Severity: 55%
Audit Metadata