giggle-minimax-h3-gen
Warn
Audited by Socket on Sep 13, 2026
1 alert found:
AnomalyAnomalyscripts/generation_api.py
LOWAnomalyLOW
scripts/generation_api.py
The code is primarily a video-generation API client and contains no clear malware or covert exfiltration behavior. It does intentionally transmit the configured API key and user-supplied generation inputs to giggle.pro as part of its function. The main security concern is unsafe interpolation of the API key into a shell startup file, which can enable shell command injection if the key is attacker-controlled or contains shell metacharacters. Command-line credential exposure is an additional security weakness. Review the destination service and fix shell escaping before use.
Confidence: 98%Severity: 58%
Audit Metadata