harmix-music-search
Audited by Socket on Sep 23, 2026
2 alerts found:
SecurityAnomalyThe fragment is ordinary integration documentation for a video-to-music search workflow. It does not contain apparent malware or intentional obfuscation. However, it exposes a hardcoded API credential and directs potentially sensitive video frames to an external service. The credential should be revoked or rotated and replaced with an environment-variable or secret-manager reference; shell inputs should also be safely quoted and validated.
The fragment is API usage documentation with a publicly embedded API key. The exposed credential should be revoked or rotated and replaced with an environment-variable or secret-manager reference. There is no clear malicious behavior in the supplied content, but the credential disclosure creates a moderate supply-chain and operational security risk if the key is active.