google-image-search

Warn

Audited by Socket on Sep 28, 2026

1 alert found:

Anomaly
AnomalyLOW
scripts/download.py

The code is a straightforward image downloader with no clear evidence of malware, obfuscation, credential theft, persistence, or destructive behavior. It has meaningful defensive security weaknesses: caller-controlled URLs can trigger SSRF, responses are read without size limits, and arbitrary remote content is written to disk without robust image validation. Risk depends on whether `results` and `download_dir` are trusted and whether network access is restricted.

Confidence: 97%Severity: 62%
Audit Metadata
Analyzed At
Sep 28, 2026, 09:42 AM
Package URL
pkg:socket/skills-sh/glebis%2Fclaude-skills%2Fgoogle-image-search%2F@4a4930cde990aa7a8d68491df5e41b79aed70832ce7b52f04b10bac1d8a0fbca