libtv-skill

Warn

Audited by Socket on Sep 15, 2026

1 alert found:

Anomaly
AnomalyLOW
scripts/download_results.py

The code is primarily a media downloader and does not show clear malware behavior. It has security weaknesses: arbitrary URL downloading, insufficient validation of session-provided URLs, unrestricted response size, and potential path traversal through the unsanitized --prefix value. The literal fragment also contains syntax errors and would not run as shown.

Confidence: 98%Severity: 58%
Audit Metadata
Analyzed At
Sep 15, 2026, 05:59 AM
Package URL
pkg:socket/skills-sh/libtv-labs%2Flibtv-skills%2Flibtv-skill%2F@32fdc10ada29c9f2b316c80b98e1807e5afe96d4f9a55be253bf85742c6606dd
Security Audit — socket — libtv-skill