linkfox-aigc-textgen

Warn

Audited by Socket on Sep 15, 2026

1 alert found:

Anomaly
AnomalyLOW
scripts/aigc_textgen.py

No clear malware, credential theft, persistence, destructive behavior, reverse shell, or cryptomining is present. The main behavior is an authenticated API client with local session logging. Security concerns are the environment-configurable API destination, which can redirect API keys and task data, and the unrestricted arbitrary-URL downloader, which may enable SSRF or resource exhaustion if reachable with untrusted input. The incomplete final `main(` call would be a syntax error if present literally. Review and constrain the gateway URL, sanitize path components, and restrict or remove arbitrary media downloads.

Confidence: 97%Severity: 55%
Audit Metadata
Analyzed At
Sep 15, 2026, 07:12 AM
Package URL
pkg:socket/skills-sh/linkfox-ai%2Flinkfox-skills%2Flinkfox-aigc-textgen%2F@19ad64a62017f2972f3698be5524a652e715574c98249233dd64bb4c7369795d