motion-critique

Warn

Audited by Socket on Sep 30, 2026

1 alert found:

Security
SecurityMEDIUM
evidence-packet.md

The media-analysis commands are ordinary ffmpeg processing, but `_wrappers=1 "$VIDEO"` executes the VIDEO path as a command. Treat this as a potentially serious command-execution flaw unless the invocation is intentional and VIDEO is guaranteed to reference a trusted executable rather than a media file. The fragment alone does not establish malicious intent.

Confidence: 96%Severity: 72%
Audit Metadata
Analyzed At
Sep 30, 2026, 03:43 PM
Package URL
pkg:socket/skills-sh/fasalzein%2Fmotion-studio%2Fmotion-critique%2F@d419fd926b5f9bb351e8b8116ec8ae2dccc9fe2a87cdd15bf07c1f8b6587fb36