weilanx-creator-lamplight-video

Warn

Audited by Socket on Oct 19, 2026

1 alert found:

Security
SecurityMEDIUM
scripts/timeline_lib.py

This module parses data from a file but evaluates declaration and shot expressions with unrestricted Python `eval`. A crafted or untrusted input file can execute arbitrary code with the application's permissions, making this a significant code-execution risk; no specific malicious payload, network indicator, or credential target is present in the supplied code.

Confidence: 99%Severity: 85%
Audit Metadata
Analyzed At
Oct 19, 2026, 10:51 AM
Package URL
pkg:socket/skills-sh/azure12355%2Fweilanx-claude-videos%2Fweilanx-creator-lamplight-video%2F@09313bc76939b4cc8c2d7b06aef7ed849c4799a60b975dbdefa665e6d45b4cef