linkfox-amazon-store-feeds
Warn
Audited by Socket on Sep 15, 2026
1 alert found:
AnomalyAnomalyscripts/upload_feed_document.py
LOWAnomalyLOW
scripts/upload_feed_document.py
The code implements a straightforward document uploader and contains no clear evidence of intentional malware or obfuscation. Its primary risks are design-level: arbitrary local file reads and arbitrary network destinations controlled by input, possible SSRF or data exfiltration, leakage of signed URL parameters in output, and optional plaintext HTTP. These risks depend on whether untrusted users can invoke the script or provide its JSON parameters.
Confidence: 98%Severity: 62%
Audit Metadata