image-fetcher
Warn
Audited by Socket on Sep 15, 2026
1 alert found:
AnomalyAnomalyscripts/fetch_image.py
LOWAnomalyLOW
scripts/fetch_image.py
The code is a straightforward image downloader and shows no clear malicious behavior, credential theft, persistence, or obfuscation. It has security weaknesses if inputs are attacker-controlled: arbitrary outbound requests, path traversal or arbitrary file writes through filename/output_path, unrestricted response size, and insufficient content validation. As supplied, it also contains a syntax error at the final main( call.
Confidence: 99%Severity: 62%
Audit Metadata