oma-video

Warn

Audited by Socket on Oct 5, 2026

1 alert found:

Anomaly
AnomalyLOW
resources/mpt/driver.py

The fragment appears to be a legitimate video-generation wrapper, not an overt malware payload. It does not directly steal system data, establish persistence, spawn a shell, or contact a suspicious endpoint. Security risk is elevated when inputs or mpt_dir are untrusted: arbitrary Python code can be executed through mpt_dir, arbitrary files can be read or written through material and output paths, and unescaped label text can affect ffmpeg filter parsing. The supplied module alone does not establish malicious intent, but it should be used only with trusted specifications, trusted MPT code, controlled PATH/environment, and escaped ffmpeg filter values.

Confidence: 95%Severity: 62%
Audit Metadata
Analyzed At
Oct 5, 2026, 04:14 PM
Package URL
pkg:socket/skills-sh/first-fluke%2Foh-my-agent%2Foma-video%2F@2563a4c62f7eec91f02062f092594131009ee8b8ca82ec65794ab31baac2badd