video-production-harness
Warn
Audited by Socket on Oct 20, 2026
1 alert found:
SecuritySecurityscripts/check_recipe.py
MEDIUMSecurityMEDIUM
scripts/check_recipe.py
This is a media reproducibility checker that unpacks a recipe, executes its `build.command`, and compares the rebuilt media with a supplied final file. The principal security risk is arbitrary, unsandboxed shell execution of a command controlled by an untrusted bundle, with the process user's privileges; only use it with trusted recipes or execute it in an isolated environment. No direct credential theft, network exfiltration, or destructive behavior is present in the shown code. As provided, the empty `CheckError` class body is a syntax error.
Confidence: 99%Severity: 78%
Audit Metadata