linkfox-zhihuiya-patent-image-search

Warn

Audited by Socket on Sep 15, 2026

1 alert found:

Anomaly
AnomalyLOW
scripts/upload_image.py

This is an image-upload utility with intentional external data transmission, not clear malware. The primary security concerns are disclosure of the selected file through a public-read object, transmission of API credentials and context headers to a configurable endpoint, and reliance on an unvalidated gateway-provided upload URL. Use only with trusted environment configuration and non-sensitive images; avoid public-read ACLs when possible. The supplied fragment is incomplete and would require correction to execute.

Confidence: 98%Severity: 58%
Audit Metadata
Analyzed At
Sep 15, 2026, 07:14 AM
Package URL
pkg:socket/skills-sh/linkfox-ai%2Flinkfox-skills%2Flinkfox-zhihuiya-patent-image-search%2F@f12a7907fc46cef27ec7fc50671fc417a752f274648f855c6d7cb6cdec2684d1