chanjing-video-compose
Warn
Audited by Socket on Sep 18, 2026
1 alert found:
AnomalyAnomalyscripts/download_result.py
LOWAnomalyLOW
scripts/download_result.py
The fragment is a straightforward URL downloader and does not show evidence of intentional malware or supply-chain sabotage. It has security weaknesses: attacker-controlled URLs can reach arbitrary destinations, and attacker-controlled output paths can create or overwrite files outside the intended directory. The unbounded response read also permits resource exhaustion. Risk is moderate in an untrusted-input context but lower when used only by a trusted local operator.
Confidence: 98%Severity: 62%
Audit Metadata