gemini-api
Fail
Audited by Socket on Feb 21, 2026
1 alert found:
Obfuscated FileObfuscated Filescripts/gemini_api.py
HIGHObfuscated FileHIGH
scripts/gemini_api.py
The code is a functional, straightforward API client for Gemini 3 series with typical CLI usage. It correctly handles text and multimodal workflows, but exposes API keys in URLs, lacks robust retry logic, and has minimal input validation and logging hygiene. While not inherently malicious, the implementation could leak credentials and is sensitive to network/API reliability. An improved version should address authentication handling, resilience, and privacy-conscious logging.
Confidence: 98%
Audit Metadata