motion-film

Warn

Audited by Socket on Sep 26, 2026

1 alert found:

Anomaly
AnomalyLOW
scripts/film-score.mjs

This appears to be a local media-rendering utility, not malware. The primary security concern is path traversal through the command-line film identifier, which can redirect generated-file writes and ffmpeg paths outside the renders directory. Validate the identifier and verify resolved paths remain inside the intended directory.

Confidence: 99%Severity: 58%
Audit Metadata
Analyzed At
Sep 26, 2026, 12:26 AM
Package URL
pkg:socket/skills-sh/basmilius%2Fskills%2Fmotion-film%2F@7d6c06872c269e5af3128dc05d2c5ecfd84491d1680309da9ff62103c072a431
Security Audit — socket — motion-film