emotional-canvas-moodboard
Warn
Audited by Socket on Sep 23, 2026
1 alert found:
AnomalyAnomalyscripts/download_urls.py
LOWAnomalyLOW
scripts/download_urls.py
The code is a straightforward JSON-driven image downloader and shows no clear malicious intent. Its main security concerns are arbitrary outbound requests (potential SSRF), unrestricted response size (memory exhaustion), and unsanitized `--prefix` path construction that can permit path traversal under suitable filesystem conditions. These are security weaknesses rather than evidence of malware.
Confidence: 98%Severity: 62%
Audit Metadata