blender-product-film

Warn

Audited by Socket on Oct 5, 2026

1 alert found:

Anomaly
AnomalyLOW
scripts/render_shots.py

No clear malware, credential theft, network exfiltration, or obfuscation is present. There is a concrete destructive path-handling risk: an untrusted --quality value can influence the directory passed to shutil.rmtree and may cause deletion outside the intended render directory. Restrict quality values and verify the resolved deletion path remains beneath the expected renders directory.

Confidence: 97%Severity: 55%
Audit Metadata
Analyzed At
Oct 5, 2026, 04:03 PM
Package URL
pkg:socket/skills-sh/edenfunf%2Freelmimic%2Fblender-product-film%2F@160c0d4f41dbb27f25179b54ddcdcbbee81ea726d061f2b0abc181f4a8409d2b