google-image-search
Warn
Audited by Socket on Sep 28, 2026
1 alert found:
AnomalyAnomalyscripts/download.py
LOWAnomalyLOW
scripts/download.py
The code is a straightforward image downloader with no clear evidence of malware, obfuscation, credential theft, persistence, or destructive behavior. It has meaningful defensive security weaknesses: caller-controlled URLs can trigger SSRF, responses are read without size limits, and arbitrary remote content is written to disk without robust image validation. Risk depends on whether `results` and `download_dir` are trusted and whether network access is restricted.
Confidence: 97%Severity: 62%
Audit Metadata