motion-film
Warn
Audited by Socket on Sep 26, 2026
1 alert found:
AnomalyAnomalyscripts/film-score.mjs
LOWAnomalyLOW
scripts/film-score.mjs
This appears to be a local media-rendering utility, not malware. The primary security concern is path traversal through the command-line film identifier, which can redirect generated-file writes and ffmpeg paths outside the renders directory. Validate the identifier and verify resolved paths remain inside the intended directory.
Confidence: 99%Severity: 58%
Audit Metadata