image-fetcher

Warn

Audited by Socket on Sep 15, 2026

1 alert found:

Anomaly
AnomalyLOW
scripts/fetch_image.py

The code is a straightforward image downloader and shows no clear malicious behavior, credential theft, persistence, or obfuscation. It has security weaknesses if inputs are attacker-controlled: arbitrary outbound requests, path traversal or arbitrary file writes through filename/output_path, unrestricted response size, and insufficient content validation. As supplied, it also contains a syntax error at the final main( call.

Confidence: 99%Severity: 62%
Audit Metadata
Analyzed At
Sep 15, 2026, 03:45 AM
Package URL
pkg:socket/skills-sh/interstellar-code%2Fclaud-skills%2Fimage-fetcher%2F@35a66d511aa32496b660948c17e2c9739bbf09bf3d9e9fb86e86c5b4546f60f5