media-use@r1

CAUTION

Publisher claims: "Get or make any media for a HyperFrames video - music, sound effects, images, icons, logos, voiceover, avatar and generated video, transcripts, cutouts, colour grades and looks - with HeyGen or free local tools, and mix placed audio. Also for footage that looks dark, flat or dull, or should be stylized or hidden." Observed in sandbox: no network, touches nothing outside the project, writes no memory.

Registry skills.shPublisher heygen-com · joined 2 days agoInstalls 1.1MLast detonated 44 h ago

Dispute verdict

Behavior trace

Honeypot run · 0 s · 1 scenarios · 0 deviations

t+CategoryObserved action

0.0sprocessno install scripts in bundle

0.0sprocessscript backend runs setup only

Static findings

CRITICAL

Access to sensitive file pathsaudio/references/requirements.md:15 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

CRITICAL

Access to sensitive file pathsaudio/scripts/heygen-voice.test.mjs:10 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

CRITICAL

Access to sensitive file pathsaudio/scripts/heygen-tts.test.mjs:24 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

CRITICAL

Access to sensitive file pathsaudio/references/tts.md:63 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

CRITICAL

Access to sensitive file pathsaudio/scripts/gemini-pipeline.test.mjs:97 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

CRITICAL

Access to sensitive file pathsaudio/scripts/audio.mjs:80 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

CRITICAL

Access to sensitive file pathsaudio/scripts/gemini-pipeline.test.mjs:67 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

CRITICAL

Access to sensitive file pathsaudio/references/tts.md:74 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

CRITICAL

Access to sensitive file pathsaudio/scripts/gemini-pipeline.test.mjs:92 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

CRITICAL

Access to sensitive file pathsaudio/scripts/lib/gemini-auth.mjs:7 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

CRITICAL

Access to sensitive file pathsaudio/scripts/lib/gemini-auth.mjs:15 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

CRITICAL

Access to sensitive file pathsaudio/scripts/lib/bgm.test.mjs:54 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

CRITICAL

Access to sensitive file pathsaudio/scripts/heygen-voice.test.mjs:26 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

CRITICAL

Access to sensitive file pathsaudio/scripts/lib/gemini-auth.mjs:8 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

CRITICAL

Access to sensitive file pathsaudio/scripts/lib/bgm.mjs:22 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

CRITICAL

Access to sensitive file pathsaudio/scripts/lib/gemini-auth.mjs:10 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

CRITICAL

Access to sensitive file pathsaudio/scripts/heygen-voice.test.mjs:18 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

CRITICAL

Access to sensitive file pathsaudio/scripts/lib/bgm.test.mjs:48 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

CRITICAL

Access to sensitive file pathsaudio/scripts/lib/bgm.test.mjs:46 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

CRITICAL

Access to sensitive file pathsaudio/scripts/heygen-voice.test.mjs:11 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

CRITICAL

Access to sensitive file pathsaudio/scripts/heygen-voice.test.mjs:19 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

CRITICAL

Access to sensitive file pathsaudio/scripts/lib/audio-meta.test.mjs:126 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

CRITICAL

Access to sensitive file pathsaudio/scripts/lib/gemini-auth.mjs:9 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

CRITICAL

Access to sensitive file pathsaudio/scripts/lib/heygen.mjs:22 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

CRITICAL

Access to sensitive file pathsaudio/scripts/lib/heygen.mjs:24 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

CRITICAL

Access to sensitive file pathsaudio/scripts/lib/gemini-auth_test.py:75 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

CRITICAL

Access to sensitive file pathsaudio/scripts/lib/gemini-auth.test.mjs:17 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

CRITICAL

Access to sensitive file pathsaudio/scripts/lib/gemini-auth_test.py:27 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

CRITICAL

Access to sensitive file pathsaudio/scripts/lib/gemini-auth.test.mjs:10 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

CRITICAL

Access to sensitive file pathsaudio/scripts/lib/gemini-auth_test.py:28 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

CRITICAL

Access to sensitive file pathsaudio/scripts/lib/gemini-auth.test.mjs:25 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

CRITICAL

Access to sensitive file pathsaudio/scripts/lib/gemini-auth.test.mjs:19 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

CRITICAL

Access to sensitive file pathsaudio/scripts/lib/gemini-tts.test.mjs:12 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

CRITICAL

Access to sensitive file pathsaudio/scripts/lib/gemini-tts.test.mjs:13 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

CRITICAL

Access to sensitive file pathsaudio/scripts/lib/gemini-tts.test.mjs:15 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

CRITICAL

Access to sensitive file pathsaudio/scripts/lib/gemini-auth.test.mjs:26 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

CRITICAL

Access to sensitive file pathsaudio/scripts/lib/heygen.mjs:33 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

CRITICAL

Access to sensitive file pathsaudio/scripts/lib/heygen.mjs:6 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

CRITICAL

Access to sensitive file pathsaudio/scripts/lib/gemini-tts.test.mjs:11 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

CRITICAL

Access to sensitive file pathsaudio/scripts/lib/gemini-tts.test.mjs:14 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

CRITICAL

Access to sensitive file pathsaudio/scripts/lib/gemini-auth_test.py:45 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

CRITICAL

Access to sensitive file pathsaudio/scripts/lib/heygen.test.mjs:30 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

CRITICAL

Access to sensitive file pathsaudio/scripts/lib/heygen.test.mjs:27 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

CRITICAL

Access to sensitive file pathsaudio/scripts/lib/heygen.mjs:46 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

CRITICAL

Access to sensitive file pathsaudio/scripts/lib/heygen.test.mjs:34 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

CRITICAL

Access to sensitive file pathsaudio/scripts/lib/tts.test.mjs:63 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

CRITICAL

Access to sensitive file pathsaudio/scripts/lib/heygen.test.mjs:49 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

CRITICAL

Access to sensitive file pathsaudio/scripts/lib/tts.cleanup.test.mjs:90 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

CRITICAL

Access to sensitive file pathsaudio/scripts/lib/tts.mjs:138 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

CRITICAL

Access to sensitive file pathsaudio/scripts/lib/python.mjs:45 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

CRITICAL

Access to sensitive file pathsaudio/scripts/lib/tts.test.mjs:61 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

CRITICAL

Access to sensitive file pathsaudio/scripts/lib/tts.mjs:139 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

CRITICAL

Access to sensitive file pathsaudio/scripts/lib/tts.cleanup.test.mjs:28 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

CRITICAL

Access to sensitive file pathsaudio/scripts/lib/heygen.test.mjs:31 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

CRITICAL

Access to sensitive file pathsaudio/scripts/lib/tts.mjs:50 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

CRITICAL

Access to sensitive file pathsaudio/scripts/lib/tts.mjs:31 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

CRITICAL

Access to sensitive file pathsaudio/scripts/lib/tts.cleanup.test.mjs:40 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

CRITICAL

Access to sensitive file pathsaudio/scripts/lib/tts.mjs:127 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

CRITICAL

Access to sensitive file pathsaudio/scripts/lib/tts.cleanup.test.mjs:22 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

CRITICAL

Access to sensitive file pathsaudio/scripts/lib/tts.cleanup.test.mjs:29 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

HIGH

npx invocation of non-well-known packageaudio/references/captions/authoring.md:123 · npx invocation of non-well-known package — may execute untrusted code

AST06

HIGH

Unicode escape sequence detectedaudio/references/captions/transcript-handling.md:54 · Unicode escape sequence detected — may contain obfuscated payloads

AST07

HIGH

npx invocation of non-well-known packageaudio/references/captions/transcript-handling.md:90 · npx invocation of non-well-known package — may execute untrusted code

AST06

HIGH

Process kill commandaudio/references/captions/authoring.md:92 · Process kill command — agent can terminate processes

AST05

HIGH

npx invocation of non-well-known packageaudio/references/captions/transcript-handling.md:39 · npx invocation of non-well-known package — may execute untrusted code

AST06

HIGH

npx invocation of non-well-known packageSKILL.md:29 · npx invocation of non-well-known package — may execute untrusted code

AST06

CRITICAL

Access to sensitive file pathsaudio/scripts/lib/tts.test.mjs:66 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

HIGH

npx invocation of non-well-known packageaudio/references/captions/authoring.md:5 · npx invocation of non-well-known package — may execute untrusted code

AST06

HIGH

npx invocation of non-well-known packageSKILL.md:30 · npx invocation of non-well-known package — may execute untrusted code

AST06

HIGH

npx invocation of non-well-known packageaudio/references/remove-background.md:6 · npx invocation of non-well-known package — may execute untrusted code

AST06

HIGH

npx invocation of non-well-known packageaudio/references/captions/authoring.md:120 · npx invocation of non-well-known package — may execute untrusted code

AST06

HIGH

npx invocation of non-well-known packageaudio/references/captions/transcript-handling.md:77 · npx invocation of non-well-known package — may execute untrusted code

AST06

HIGH

npx invocation of non-well-known packageSKILL.md:28 · npx invocation of non-well-known package — may execute untrusted code

AST06

HIGH

Process kill commandaudio/references/captions/authoring.md:161 · Process kill command — agent can terminate processes

AST05

HIGH

npx invocation of non-well-known packageSKILL.md:26 · npx invocation of non-well-known package — may execute untrusted code

AST06

CRITICAL

Access to sensitive file pathsaudio/scripts/lib/tts.test.mjs:75 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

CRITICAL

Access to sensitive file pathsaudio/scripts/lib/tts.test.mjs:73 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

HIGH

npx invocation of non-well-known packageSKILL.md:13 · npx invocation of non-well-known package — may execute untrusted code

AST06

HIGH

npx invocation of non-well-known packageaudio/references/bgm.md:8 · npx invocation of non-well-known package — may execute untrusted code

AST06

HIGH

npx invocation of non-well-known packageaudio/references/captions/authoring.md:124 · npx invocation of non-well-known package — may execute untrusted code

AST06

HIGH

npx invocation of non-well-known packageaudio/references/bgm.md:6 · npx invocation of non-well-known package — may execute untrusted code

AST06

HIGH

npx invocation of non-well-known packageaudio/references/remove-background.md:11 · npx invocation of non-well-known package — may execute untrusted code

AST06

HIGH

npx invocation of non-well-known packageaudio/references/requirements.md:21 · npx invocation of non-well-known package — may execute untrusted code

AST06

HIGH

npx invocation of non-well-known packageaudio/references/transcribe.md:6 · npx invocation of non-well-known package — may execute untrusted code

AST06

HIGH

npx invocation of non-well-known packageaudio/references/requirements.md:29 · npx invocation of non-well-known package — may execute untrusted code

AST06

HIGH

npx invocation of non-well-known packageaudio/references/tts-to-captions.md:27 · npx invocation of non-well-known package — may execute untrusted code

AST06

HIGH

npx invocation of non-well-known packageaudio/references/remove-background.md:9 · npx invocation of non-well-known package — may execute untrusted code

AST06

HIGH

npx invocation of non-well-known packageaudio/references/tts-to-captions.md:28 · npx invocation of non-well-known package — may execute untrusted code

AST06

HIGH

npx invocation of non-well-known packageaudio/references/transcribe.md:7 · npx invocation of non-well-known package — may execute untrusted code

AST06

HIGH

npx invocation of non-well-known packageaudio/references/remove-background.md:8 · npx invocation of non-well-known package — may execute untrusted code

AST06

HIGH

npx invocation of non-well-known packageaudio/references/tts.md:7 · npx invocation of non-well-known package — may execute untrusted code

AST06

HIGH

npx invocation of non-well-known packageaudio/references/transcribe.md:8 · npx invocation of non-well-known package — may execute untrusted code

AST06

HIGH

npx invocation of non-well-known packageaudio/references/remove-background.md:7 · npx invocation of non-well-known package — may execute untrusted code

AST06

HIGH

npx invocation of non-well-known packageaudio/references/requirements.md:5 · npx invocation of non-well-known package — may execute untrusted code

AST06

HIGH

npx invocation of non-well-known packageaudio/references/tts.md:51 · npx invocation of non-well-known package — may execute untrusted code

AST06

HIGH

npx invocation of non-well-known packageaudio/references/transcribe.md:10 · npx invocation of non-well-known package — may execute untrusted code

AST06

HIGH

npx invocation of non-well-known packageaudio/references/transcribe.md:9 · npx invocation of non-well-known package — may execute untrusted code

AST06

HIGH

npx invocation of non-well-known packageaudio/references/sfx.md:8 · npx invocation of non-well-known package — may execute untrusted code

AST06

HIGH

npx invocation of non-well-known packageaudio/references/tts.md:3 · npx invocation of non-well-known package — may execute untrusted code

AST06

HIGH

npx invocation of non-well-known packageaudio/scripts/lib/tts.cleanup.test.mjs:96 · npx invocation of non-well-known package — may execute untrusted code

AST06

HIGH

npx invocation of non-well-known packageaudio/scripts/lib/tts.spawn.test.mjs:81 · npx invocation of non-well-known package — may execute untrusted code

AST06

HIGH

npx invocation of non-well-known packageaudio/scripts/lib/tts.mjs:290 · npx invocation of non-well-known package — may execute untrusted code

AST06

HIGH

npx invocation of non-well-known packageaudio/scripts/lib/tts.spawn.test.mjs:68 · npx invocation of non-well-known package — may execute untrusted code

AST06

HIGH

Outbound HTTP to raw IP addressaudio/scripts/lib/heygen.test.mjs:238 · Outbound HTTP to raw IP address — may bypass domain-based monitoring

AST07

HIGH

npx invocation of non-well-known packagereferences/grading.md:23 · npx invocation of non-well-known package — may execute untrusted code

AST06

HIGH

Outbound HTTP to raw IP addressaudio/scripts/lib/heygen.test.mjs:232 · Outbound HTTP to raw IP address — may bypass domain-based monitoring

AST07

HIGH

npx invocation of non-well-known packageaudio/scripts/lib/heygen.mjs:172 · npx invocation of non-well-known package — may execute untrusted code

AST06

HIGH

npx invocation of non-well-known packageaudio/scripts/lib/tts.spawn.test.mjs:98 · npx invocation of non-well-known package — may execute untrusted code

AST06

HIGH

npx invocation of non-well-known packageaudio/scripts/lib/heygen.mjs:176 · npx invocation of non-well-known package — may execute untrusted code

AST06

HIGH

Outbound HTTP to raw IP addressaudio/scripts/lib/heygen.test.mjs:262 · Outbound HTTP to raw IP address — may bypass domain-based monitoring

AST07

HIGH

npx invocation of non-well-known packageaudio/scripts/lib/tts.test.mjs:168 · npx invocation of non-well-known package — may execute untrusted code

AST06

HIGH

npx invocation of non-well-known packageaudio/references/tts.md:73 · npx invocation of non-well-known package — may execute untrusted code

AST06

HIGH

npx invocation of non-well-known packagereferences/audio.md:15 · npx invocation of non-well-known package — may execute untrusted code

AST06

HIGH

npx invocation of non-well-known packageaudio/scripts/lib/tts.test.mjs:163 · npx invocation of non-well-known package — may execute untrusted code

AST06

HIGH

npx invocation of non-well-known packageaudio/scripts/lib/tts.spawn.test.mjs:12 · npx invocation of non-well-known package — may execute untrusted code

AST06

HIGH

npx invocation of non-well-known packageaudio/scripts/lib/tts.test.mjs:169 · npx invocation of non-well-known package — may execute untrusted code

AST06

HIGH

npx invocation of non-well-known packageaudio/references/tts.md:70 · npx invocation of non-well-known package — may execute untrusted code

AST06

HIGH

npx invocation of non-well-known packageaudio/scripts/lib/heygen.mjs:179 · npx invocation of non-well-known package — may execute untrusted code

AST06

HIGH

Outbound HTTP to raw IP addressaudio/scripts/lib/heygen.test.mjs:229 · Outbound HTTP to raw IP address — may bypass domain-based monitoring

AST07

HIGH

npx invocation of non-well-known packageaudio/scripts/lib/tts.spawn.test.mjs:46 · npx invocation of non-well-known package — may execute untrusted code

AST06

HIGH

npx invocation of non-well-known packageaudio/scripts/lib/tts.mjs:160 · npx invocation of non-well-known package — may execute untrusted code

AST06

HIGH

npx invocation of non-well-known packagereferences/grading.md:20 · npx invocation of non-well-known package — may execute untrusted code

AST06

HIGH

Python subprocess execution detectedaudio/scripts/extract-audio-data.py:60 · Python subprocess execution detected

AST05

MEDIUM

File type combined with upload actionaudio/scripts/extract-audio-data.py:180 · File type combined with upload action — agent may exfiltrate local data files

AST07

MEDIUM

File type combined with upload actionaudio/scripts/audio.mjs:15 · File type combined with upload action — agent may exfiltrate local data files

AST07

HIGH

npx invocation of non-well-known packagereferences/media-treatment-recipes.md:827 · npx invocation of non-well-known package — may execute untrusted code

AST06

HIGH

npx invocation of non-well-known packagereferences/grading.md:111 · npx invocation of non-well-known package — may execute untrusted code

AST06

HIGH

npx invocation of non-well-known packagereferences/media-treatment-recipes.md:308 · npx invocation of non-well-known package — may execute untrusted code

AST06

MEDIUM

File type combined with upload actionaudio/references/tts-to-captions.md:27 · File type combined with upload action — agent may exfiltrate local data files

AST07

MEDIUM

File type combined with upload actionaudio/scripts/heygen-tts.mjs:122 · File type combined with upload action — agent may exfiltrate local data files

AST07

HIGH

npx invocation of non-well-known packagereferences/local.md:22 · npx invocation of non-well-known package — may execute untrusted code

AST06

HIGH

npx invocation of non-well-known packagereferences/media-treatment-recipes.md:807 · npx invocation of non-well-known package — may execute untrusted code

AST06

MEDIUM

File type combined with upload actionaudio/references/tts.md:244 · File type combined with upload action — agent may exfiltrate local data files

AST07

HIGH

npx invocation of non-well-known packagereferences/media-treatment-recipes.md:787 · npx invocation of non-well-known package — may execute untrusted code

AST06

HIGH

npx invocation of non-well-known packagereferences/local.md:12 · npx invocation of non-well-known package — may execute untrusted code

AST06

HIGH

npx invocation of non-well-known packagereferences/media-treatment-recipes.md:829 · npx invocation of non-well-known package — may execute untrusted code

AST06

HIGH

npx invocation of non-well-known packagereferences/local.md:9 · npx invocation of non-well-known package — may execute untrusted code

AST06

HIGH

npx invocation of non-well-known packagereferences/grading.md:98 · npx invocation of non-well-known package — may execute untrusted code

AST06

HIGH

npx invocation of non-well-known packagereferences/local.md:16 · npx invocation of non-well-known package — may execute untrusted code

AST06

HIGH

npx invocation of non-well-known packagereferences/local.md:7 · npx invocation of non-well-known package — may execute untrusted code

AST06

MEDIUM

File type combined with upload actionaudio/scripts/gemini-pipeline.test.mjs:44 · File type combined with upload action — agent may exfiltrate local data files

AST07

HIGH

npx invocation of non-well-known packagereferences/grading.md:117 · npx invocation of non-well-known package — may execute untrusted code

AST06

MEDIUM

File type combined with upload actionaudio/references/tts-to-captions.md:12 · File type combined with upload action — agent may exfiltrate local data files

AST07

MEDIUM

File type combined with upload actionaudio/scripts/audio.mjs:28 · File type combined with upload action — agent may exfiltrate local data files

AST07

MEDIUM

URL using raw IP addressaudio/scripts/lib/heygen.test.mjs:262 · URL using raw IP address — may bypass domain-based filtering

AST07

MEDIUM

URL using raw IP addressaudio/scripts/lib/heygen.test.mjs:229 · URL using raw IP address — may bypass domain-based filtering

AST07

MEDIUM

URL using raw IP addressaudio/scripts/lib/heygen.test.mjs:238 · URL using raw IP address — may bypass domain-based filtering

AST07

MEDIUM

File type combined with upload actionaudio/scripts/lib/tts.cleanup.test.mjs:27 · File type combined with upload action — agent may exfiltrate local data files

AST07

MEDIUM

URL using raw IP addressaudio/scripts/lib/heygen.test.mjs:232 · URL using raw IP address — may bypass domain-based filtering

AST07