watermark-removal
Warn
Audited by Socket on Aug 15, 2026
1 alert found:
AnomalyAnomalyscripts/batch-process.py
LOWAnomalyLOW
scripts/batch-process.py
In this wrapper module, the main security-relevant behavior is dynamically executing a sibling Python file (remove-watermark.py) via exec_module and then calling its functions on untrusted images. The wrapper itself shows no explicit exfiltration, credential theft, or command execution, but it establishes a strong supply-chain/trust-boundary risk: the companion module’s contents determine whether the overall package is safe. Additionally, the tool’s explicit purpose suggests watermark/protection circumvention, which may be policy-misuse even if not malware.
Confidence: 58%Severity: 50%
Audit Metadata