byted-seedream-image-generate

Warn

Audited by Socket on Sep 21, 2026

1 alert found:

Anomaly
AnomalyLOW
scripts/seedream_image_generate.py

The code is primarily a legitimate image-generation API client and contains no evident malware or backdoor behavior. The main security issue is accidental exposure of the bearer API key because complete authorization headers are printed during every request. API endpoint configurability also requires trusted environment configuration. Remove credential logging and restrict or validate the API base URL before production use.

Confidence: 98%Severity: 55%
Audit Metadata
Analyzed At
Sep 21, 2026, 03:17 PM
Package URL
pkg:socket/skills-sh/bytedance%2Fagentkit-samples%2Fbyted-seedream-image-generate%2F@f69d2ac1a463cf584ea76423f25ee7253d8a124e5b25280304c5cb2415ac8c61