linkfox-aigc-textgen
Warn
Audited by Socket on Sep 15, 2026
1 alert found:
AnomalyAnomalyscripts/aigc_textgen.py
LOWAnomalyLOW
scripts/aigc_textgen.py
No clear malware, credential theft, persistence, destructive behavior, reverse shell, or cryptomining is present. The main behavior is an authenticated API client with local session logging. Security concerns are the environment-configurable API destination, which can redirect API keys and task data, and the unrestricted arbitrary-URL downloader, which may enable SSRF or resource exhaustion if reachable with untrusted input. The incomplete final `main(` call would be a syntax error if present literally. Review and constrain the gateway URL, sanitize path components, and restrict or remove arbitrary media downloads.
Confidence: 97%Severity: 55%
Audit Metadata