📦
Historique des audits
higgsfield-faceless-video - 1 audit
Version de l’audit 1 Dernier
28 oct. 2026, 14:47
Of 365 static findings, 364 are false positives covering media tooling, temporary files, provenance checks, and documentation. One low-severity download risk remains because untrusted URLs and redirects can reach internal services. No evidence found of prompt injection, credential theft, or malicious execution intent in the reviewed files.
33
Fichiers analysés
4,691
Lignes analysées
4
Éléments à examiner
0
Faux positifs ignorés
Éléments d’évaluation des capacités (1)
Il s’agit de capacités locales réelles qui peuvent être attendues pour cette compétence ; elles nécessitent donc un examen, mais ne sont pas comptabilisées comme comportement malveillant confirmé.
Faible
Fetch API call
fetch(){ if [[ "$1" == http://* || "$1" == https://* ]]; then curl -fsSL "$1" -o "$2"; else [[ -f "$
The downloader accepts arbitrary HTTP(S) destinations and follows redirects without address checks. An untrusted asset URL could trigger requests to internal services.
Facteurs de risque
⚙️ Commandes externes (50)
scripts/assemble_blocks.sh:67 scripts/assemble_blocks.sh:80 scripts/assemble_blocks.sh:83 scripts/assemble_blocks.sh:90 scripts/assemble_blocks.sh:91 scripts/assemble_blocks.sh:93 scripts/assemble_blocks.sh:101 scripts/assemble_blocks.sh:106 scripts/assemble_blocks.sh:133 scripts/assemble_blocks.sh:134 scripts/assemble_blocks.sh:135 scripts/assemble_blocks.sh:136 scripts/assemble_blocks.sh:138 scripts/assemble_blocks.sh:143 scripts/assemble_blocks.sh:144 scripts/assemble_blocks.sh:145 scripts/assemble_blocks.sh:147 scripts/assemble_blocks.sh:149 scripts/assemble_blocks.sh:151 scripts/assemble_blocks.sh:153 scripts/assemble_blocks.sh:155 scripts/assemble_blocks.sh:170 scripts/assemble_blocks.sh:172 scripts/assemble_blocks.sh:173 scripts/assemble_blocks.sh:176 scripts/assemble_blocks.sh:186 scripts/assemble_blocks.sh:187 scripts/assemble_blocks.sh:202 scripts/assemble_blocks.sh:222 scripts/assemble_blocks.sh:226 scripts/assemble_blocks.sh:229 scripts/assemble_blocks.sh:233 scripts/assemble_blocks.sh:242 scripts/assemble_blocks.sh:243 scripts/assemble_blocks.sh:244 scripts/assemble_blocks.sh:245 scripts/assemble_final.sh:39 scripts/assemble_final.sh:42 scripts/assemble_final.sh:51 scripts/assemble_final.sh:60 scripts/assemble_final.sh:63 scripts/assemble_final.sh:64 scripts/assemble_final.sh:73 scripts/assemble_final.sh:74 scripts/assemble_final.sh:82 scripts/assemble_final.sh:96 scripts/assemble_final.sh:104 scripts/assemble_final.sh:105 scripts/assemble_final.sh:106 scripts/assemble_final.sh:111
🌐 Accès réseau (5)
📁 Accès au système de fichiers (44)
scripts/assemble_blocks.sh:76 scripts/assemble_blocks.sh:114 scripts/assemble_blocks.sh:121 scripts/assemble_blocks.sh:67 scripts/assemble_blocks.sh:202 scripts/assemble_blocks.sh:80 scripts/assemble_final.sh:83 scripts/assemble_final.sh:210 scripts/assemble_final.sh:60 scripts/assemble_final.sh:82 scripts/assemble_final.sh:111 scripts/assemble_partial_edit.sh:26 scripts/assemble_partial_edit.sh:39 scripts/assemble_partial_edit.sh:111 scripts/assemble_partial_edit.sh:112 scripts/assemble_partial_edit.sh:298 scripts/assemble_slides.sh:45 scripts/assemble_slides.sh:193 scripts/assemble_slides.sh:251 scripts/assemble_slides.sh:33 scripts/assemble_slides.sh:51 scripts/assemble_slides.sh:261 scripts/audio_to_captions.py:368 scripts/audio_to_captions.py:372 scripts/audio_to_captions.py:392 scripts/audio_to_captions.py:396 scripts/audio_to_captions.py:418 scripts/burn_captions.sh:48 scripts/burn_captions.sh:43 scripts/burn_captions.sh:47 scripts/burn_captions.sh:57 scripts/burn_captions.sh:61 scripts/burn_captions.sh:54 scripts/check_voice.sh:5 scripts/check_voice.sh:8 scripts/presenter_composite.sh:41 scripts/presenter_composite.sh:68 scripts/speech_metrics.sh:19 scripts/tests/test_assembly.py:6 scripts/tests/test_assembly.py:19 scripts/tests/test_channel.py:6 scripts/tests/test_channel.py:42 scripts/tests/test_modes.py:8 scripts/tests/test_modes.py:38
Audité par: codex