html2video

Warn

Audited by Socket on Oct 7, 2026

1 alert found:

Anomaly
AnomalyLOW
scripts/render.mjs

The code appears to be a legitimate storyboard staging and video-rendering CLI, with no clear evidence of malware. It has path-handling risks: an unsanitized --slug can redirect asset writes, and storyboard paths can cause files outside the storyboard directory to be copied into a public directory. Use only trusted storyboards and validate slug and asset paths before use.

Confidence: 97%Severity: 55%
Audit Metadata
Analyzed At
Oct 7, 2026, 08:02 AM
Package URL
pkg:socket/skills-sh/cclank%2Flanshu-html2video-skill%2Fhtml2video%2F@a19000c9c5d7a40819149578e11c851d13ecf7e3