laohan-yunying
Warn
Audited by Socket on Aug 27, 2026
1 alert found:
AnomalyAnomalyscripts/tzfilm_douyin_adapter.py
LOWAnomalyLOW
scripts/tzfilm_douyin_adapter.py
The provided code is a thin loader that dynamically executes a specific Python file from a hardcoded path under the user’s ~/Documents directory. While the snippet contains no overt malicious logic by itself, the absence of integrity/permission checks combined with runpy.run_path creates a high-impact arbitrary code execution boundary if the target file can be modified or replaced.
Confidence: 74%Severity: 66%
Audit Metadata