after-effects
Warn
Audited by Socket on Sep 15, 2026
1 alert found:
SecuritySecurityscripts/runner.sh
MEDIUMSecurityMEDIUM
scripts/runner.sh
The code is an After Effects automation runner and contains no clear malware indicators such as exfiltration, persistence, cryptomining, or reverse-shell behavior. It has significant security weaknesses: unescaped values are embedded into dynamically executed JXA, and predictable /tmp files are vulnerable to local race and symlink attacks. It also logs potentially sensitive arguments and trusts externally writable result files. Use only with trusted inputs and harden the quoting and temporary-file design.
Confidence: 96%Severity: 72%
Audit Metadata