motion-graphics-director
Warn
Audited by Socket on Sep 24, 2026
1 alert found:
AnomalyAnomalytemplates/pipeline.mjs
LOWAnomalyLOW
templates/pipeline.mjs
The code appears to be a local media-rendering and stitching utility, with no evident data theft or malware behavior. However, schedule data is inserted unsafely into an execSync shell command, creating a command-injection risk if the schedule file can be influenced by an untrusted party. The recursive deletion is limited to the fixed project output directory out/seq.
Confidence: 98%Severity: 62%
Audit Metadata