linkfox-chuhaijiang-tiktok-creator
Warn
Audited by Socket on Sep 14, 2026
1 alert found:
AnomalyAnomalyscripts/chuhaijiang_creator_rank_agencies.py
LOWAnomalyLOW
scripts/chuhaijiang_creator_rank_agencies.py
The code is primarily an API client with caching and local response persistence. It does transmit an environment-provided API key and request data to the configured gateway, and it has a genuine path traversal risk because SESSION_ID is not sanitized before being used as a directory name. The configurable endpoint also requires trusted environment configuration. No clear malicious payload, obfuscation, credential harvesting beyond the intended API authentication, or system compromise behavior is present. The shown fragment is syntactically incomplete at the final call.
Confidence: 97%Severity: 57%
Audit Metadata