reverse-animate

Warn

Audited by Socket on Sep 12, 2026

1 alert found:

Anomaly
AnomalyLOW
scripts/06_render_diff.py

The code appears intended for local browser-based video recording and visual fidelity comparison. It does not show evidence of malware or data exfiltration. However, interpolating unescaped paths into executable Python source creates a potential code-injection vulnerability, and the fixed temporary filename creates a concurrency risk. Use safe quoting such as repr() or avoid generated source entirely, use a unique temporary file, validate inputs, and review the imported 02_motion_profile module.

Confidence: 97%Severity: 62%
Audit Metadata
Analyzed At
Sep 12, 2026, 02:54 PM
Package URL
pkg:socket/skills-sh/ganidhu%2Fskills%2Freverse-animate%2F@f1994d6c4a53c1bc572ad7a187611ef19ed50cdb302c566d6108b847c356bd30
Security Audit — socket — reverse-animate