reverse-animate
Warn
Audited by Socket on Sep 12, 2026
1 alert found:
AnomalyAnomalyscripts/06_render_diff.py
LOWAnomalyLOW
scripts/06_render_diff.py
The code appears intended for local browser-based video recording and visual fidelity comparison. It does not show evidence of malware or data exfiltration. However, interpolating unescaped paths into executable Python source creates a potential code-injection vulnerability, and the fixed temporary filename creates a concurrency risk. Use safe quoting such as repr() or avoid generated source entirely, use a unique temporary file, validate inputs, and review the imported 02_motion_profile module.
Confidence: 97%Severity: 62%
Audit Metadata