byted-viking-knowledgebase

Warn

Audited by Socket on Sep 21, 2026

1 alert found:

Security
SecurityMEDIUM
scripts/search.py

The code appears to be a legitimate knowledge-base query client rather than malware. Its primary security issue is transmitting the API key and query over unencrypted HTTP to the configured external service. HTTPS should be used and response/status/error handling should be strengthened. No clear data theft, backdoor, destructive behavior, or obfuscated payload is present.

Confidence: 98%Severity: 72%
Audit Metadata
Analyzed At
Sep 21, 2026, 03:18 PM
Package URL
pkg:socket/skills-sh/bytedance%2Fagentkit-samples%2Fbyted-viking-knowledgebase%2F@8e0c5e359d44de6a96dea5c456bb11679ce63d87fa0cf702a879be971dc2982d