skills/weifenghuang/skillvault/xiaoyuzhou-transcribe/Socket

xiaoyuzhou-transcribe

Warn

Audited by Socket on Oct 10, 2026

1 alert found:

Anomaly

Anomalyscripts/xiaoyuzhou_transcribe.py

LOW

AnomalyLOW

scripts/xiaoyuzhou_transcribe.py

The code appears to implement an episode downloader and transcription utility, with no clear malicious behavior. It has a meaningful path traversal risk because remote episode identifiers are used unsanitized in output filenames, and it permits requests to unvalidated URLs. Restrict metadata-derived filenames and validate destination hosts before use.

Confidence: 98%Severity: 52%

Audit Metadata

Analyzed At

Oct 10, 2026, 12:00 PM

Package URL

pkg:socket/skills-sh/weifenghuang%2Fskillvault%2Fxiaoyuzhou-transcribe%2F@80aa34161c32eeb91b731acb7b9e41545e187f22f4909427996915146ad5a81e