motion-graphics-director

Warn

Audited by Socket on Sep 24, 2026

1 alert found:

Anomaly
AnomalyLOW
templates/pipeline.mjs

The code appears to be a local media-rendering and stitching utility, with no evident data theft or malware behavior. However, schedule data is inserted unsafely into an execSync shell command, creating a command-injection risk if the schedule file can be influenced by an untrusted party. The recursive deletion is limited to the fixed project output directory out/seq.

Confidence: 98%Severity: 62%
Audit Metadata
Analyzed At
Sep 24, 2026, 10:39 AM
Package URL
pkg:socket/skills-sh/mamounhisham1%2Fskills%2Fmotion-graphics-director%2F@a0449439f9a6d1af2c0f0028711c7038b5546bf97ef64a0ff686783691247375