AI Video Gen

• Analyzed: May 11, 2026, 5:43 AM
• Findings: 1
• Version: 1.0.0
• Hash: 713fd2bab97b2255a9e2ef95d86db8cb39f19c271f0c7ec2dc60536613543688
• Source: palm
• External report: View on VirusTotal

Findings (1)

The script `scripts/generate_video.py` contains a critical logic error where the `VIDEO_GEN_API_KEY` environment variable is incorrectly used as the `BASE_URL` for API requests. This causes the script to attempt network connections using the secret key as a hostname, which leads to functional failure and potential credential exposure in network logs or DNS queries. Additionally, `SKILL.md` provides instructions for the AI agent to programmatically handle sensitive Feishu (Lark) credentials (`app_id` and `app_secret`), which increases the risk of credential theft or accidental disclosure through the agent's execution context.