ecommerce-tiktok-video-rank

Warn

Audited by Socket on Sep 14, 2026

1 alert found:

Anomaly
AnomalyLOW
scripts/echotik_list_video_rank.py

No clear malware or intentional data theft is present. The code is a network API client that intentionally sends an API key and request metadata to NexScope and stores returned data locally. Security risk is primarily conditional: a user-controlled NEXSCOPE_PROXY_BASE can redirect credential transmission, and a user-controlled SESSION_ID can cause path traversal or arbitrary-path file writes. The literal ending also appears syntactically incomplete.

Confidence: 97%Severity: 58%
Audit Metadata
Analyzed At
Sep 14, 2026, 04:15 AM
Package URL
pkg:socket/skills-sh/nexscope-ai%2Fnexscope-ecommerce-skills%2Fecommerce-tiktok-video-rank%2F@66a4e932d88c171aade30951fb78fba8eb080ca6797777f147c9fb68c57b3768