giggle-minimax-h3-gen

Warn

Audited by Socket on Sep 13, 2026

1 alert found:

Anomaly
AnomalyLOW
scripts/generation_api.py

The code is primarily a video-generation API client and contains no clear malware or covert exfiltration behavior. It does intentionally transmit the configured API key and user-supplied generation inputs to giggle.pro as part of its function. The main security concern is unsafe interpolation of the API key into a shell startup file, which can enable shell command injection if the key is attacker-controlled or contains shell metacharacters. Command-line credential exposure is an additional security weakness. Review the destination service and fix shell escaping before use.

Confidence: 98%Severity: 58%
Audit Metadata
Analyzed At
Sep 13, 2026, 03:56 AM
Package URL
pkg:socket/skills-sh/giggle-official%2Fskills%2Fgiggle-minimax-h3-gen%2F@a0dcbf5627a5795167b2d8b612badb930003778f433b042dc78989f5fe19c1ff
Security Audit — socket — giggle-minimax-h3-gen