chanjing-video-compose

Warn

Audited by Socket on Sep 18, 2026

1 alert found:

Anomaly
AnomalyLOW
scripts/download_result.py

The fragment is a straightforward URL downloader and does not show evidence of intentional malware or supply-chain sabotage. It has security weaknesses: attacker-controlled URLs can reach arbitrary destinations, and attacker-controlled output paths can create or overwrite files outside the intended directory. The unbounded response read also permits resource exhaustion. Risk is moderate in an untrusted-input context but lower when used only by a trusted local operator.

Confidence: 98%Severity: 62%
Audit Metadata
Analyzed At
Sep 18, 2026, 07:07 AM
Package URL
pkg:socket/skills-sh/chanjing-ai%2Fchan-skills%2Fchanjing-video-compose%2F@6e94cef25b5354d0d90d5cef5c07d84a263f9048e6abc7bef9ece49436de08e9