d-molecule-ray-tracer
Warn
Audited by Socket on Sep 23, 2026
1 alert found:
AnomalyAnomalyscripts/main.py
LOWAnomalyLOW
scripts/main.py
The code is a rendering-script generator, not apparent malware. Its primary security concern is unsafe interpolation of untrusted command-line values into scripts that may later be executed by PyMOL or ChimeraX, creating a potential downstream command-injection risk. The arbitrary output path is also potentially dangerous in a privileged or service context. As provided, multiple syntax errors prevent execution. The assessment is limited to this fragment.
Confidence: 98%Severity: 55%
Audit Metadata