anygen-doc

Fail

Audited by Socket on Mar 12, 2026

1 alert found:

Obfuscated File
Obfuscated FileHIGH
scripts/anygen.py

This code is a benign-looking CLI client for AnyGen's API with no direct indicators of malware within the provided fragment. The main security concerns are operational: it transmits API keys and user files to a remote service by design, and it downloads server-provided URLs to local disk without strict validation. The auth and fileutil helper modules (not included) are critical to audit because they handle credentials and file I/O. Also fix the evident runtime errors in the snippet before usage. Overall risk is moderate given network/file sinks and missing dependent-module review.

Confidence: 98%
Audit Metadata
Analyzed At
Mar 12, 2026, 08:45 AM
Package URL
pkg:socket/skills-sh/anygenio%2Fanygen-skills%2Fanygen-doc%2F@59b0e6443bbc95a7188150b0ef28d78054629bd3