image-generation
Warn
Audited by Socket on Sep 19, 2026
1 alert found:
AnomalyAnomalyscripts/lib/utils.ts
LOWAnomalyLOW
scripts/lib/utils.ts
The code appears to implement ordinary filename, environment validation, and image download helpers. It does not show evidence of intentional malware. Security concerns are conditional on untrusted inputs: unrestricted URLs may enable SSRF and large responses may cause resource exhaustion; unrestricted file paths may enable path traversal or unauthorized file overwrite; and ext should be validated. Environment variable values are not leaked by this fragment.
Confidence: 98%Severity: 56%
Audit Metadata