blender-product-film
Warn
Audited by Socket on Oct 5, 2026
1 alert found:
AnomalyAnomalyscripts/render_shots.py
LOWAnomalyLOW
scripts/render_shots.py
No clear malware, credential theft, network exfiltration, or obfuscation is present. There is a concrete destructive path-handling risk: an untrusted --quality value can influence the directory passed to shutil.rmtree and may cause deletion outside the intended render directory. Restrict quality values and verify the resolved deletion path remains beneath the expected renders directory.
Confidence: 97%Severity: 55%
Audit Metadata