siliconflow-vision
Warn
Audited by Socket on Jul 16, 2026
1 alert found:
SecuritySecurityconfig/default.json
MEDIUMSecurityMEDIUM
config/default.json
No malicious code is visible in this JSON fragment; however, it contains a hardcoded, plaintext SiliconFlow API key, creating a critical credential-exposure risk in a supply-chain/package distribution context. The key should be revoked/rotated and removed from the artifact in favor of environment variables or a secret manager.
Confidence: 80%Severity: 90%
Audit Metadata