video-podcast-maker
Warn
Audited by Socket on Aug 1, 2026
1 alert found:
AnomalyAnomalyscripts/tts/backends/ttscn.py
LOWAnomalyLOW
scripts/tts/backends/ttscn.py
This fragment does not show direct malware behavior (no network activity, no persistence, no obvious data theft). However, it carries moderate security risk because it executes a configurable external Python entrypoint (config['entry']) and passes through inherited environment variables, while also performing filesystem writes/deletes under output_dir. If an attacker can influence configuration values (especially entry, output_dir, or environment), they could potentially achieve arbitrary code execution and unintended filesystem impact. Otherwise, with trusted configuration, it appears consistent with a legitimate TTS + ffmpeg audio synthesis pipeline.
Confidence: 62%Severity: 50%
Audit Metadata