after-effects

Warn

Audited by Socket on Sep 15, 2026

1 alert found:

Security
SecurityMEDIUM
scripts/runner.sh

The code is an After Effects automation runner and contains no clear malware indicators such as exfiltration, persistence, cryptomining, or reverse-shell behavior. It has significant security weaknesses: unescaped values are embedded into dynamically executed JXA, and predictable /tmp files are vulnerable to local race and symlink attacks. It also logs potentially sensitive arguments and trusts externally writable result files. Use only with trusted inputs and harden the quoting and temporary-file design.

Confidence: 96%Severity: 72%
Audit Metadata
Analyzed At
Sep 15, 2026, 12:53 PM
Package URL
pkg:socket/skills-sh/aedev-tools%2Fadobe-agent-skills%2Fafter-effects%2F@e1d6e9dbe23e69db294f9c192e325c122de12e3443d09e7954b950b1e21bfe12