logo-creator
Warn
Audited by Socket on Jun 17, 2026
1 alert found:
AnomalyAnomalyscripts/vectorize.py
LOWAnomalyLOW
scripts/vectorize.py
The code is a straightforward integration utility for an external vectorization API. The main security concerns are the brittle and potentially leaking method of obtaining the API key from ~/.zshrc, and reliance on external network calls which can leak data and depend on external service trust. No explicit malicious behavior detected (no exfiltration beyond intended API usage, no code execution, no hardcoded secrets in source). Risks are moderate due to key retrieval pattern and external dependency.
Confidence: 100%Severity: 60%
Audit Metadata