lov-sync-with-synology
Pass
Audited by Gen Agent Trust Hub on Oct 18, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSDATA_EXFILTRATION
Full Analysis
- [COMMAND_EXECUTION]: The
synology_cli.pyscript executes the macOSsecuritycommand viasubprocess.runto securely access the system keychain. This allows the tool to retrieve DSM passwords without requiring them to be stored in plain text or passed as command-line arguments. - [EXTERNAL_DOWNLOADS]: During the setup process,
scripts/install.shdownloads several Python libraries from the Python Package Index (PyPI), includingrequestsandsynology-api. These are standard dependencies used for network communication and interacting with the Synology File Station API. - [DATA_EXFILTRATION]: The application performs network requests to official Synology QuickConnect infrastructure and the user's private NAS endpoint. These connections are necessary for resolving connection paths and performing the file uploads requested by the user.
Audit Metadata