laohan-yunying

Warn

Audited by Socket on Aug 27, 2026

1 alert found:

Anomaly
AnomalyLOW
scripts/tzfilm_douyin_adapter.py

The provided code is a thin loader that dynamically executes a specific Python file from a hardcoded path under the user’s ~/Documents directory. While the snippet contains no overt malicious logic by itself, the absence of integrity/permission checks combined with runpy.run_path creates a high-impact arbitrary code execution boundary if the target file can be modified or replaced.

Confidence: 74%Severity: 66%
Audit Metadata
Analyzed At
Aug 27, 2026, 02:23 AM
Package URL
pkg:socket/skills-sh/hanzhcn%2Flaohan-skills%2Flaohan-yunying%2F@3528497bcb56b956e114014c44e64abade1781e2e029b4d57ca1312cb8f28dab
Security Audit — socket — laohan-yunying