beauty-video-gen

Warn

Audited by Socket on Sep 14, 2026

1 alert found:

Anomaly
AnomalyLOW
scripts/beauty_glow_filter.py

This is a video enhancement and transcoding script with no clear evidence of intentional malware, data theft, persistence, or sabotage. However, eval(parts[2]) is an avoidable arbitrary-code-execution vulnerability because ffprobe output is treated as Python code. Replace it with safe numeric parsing such as float(parts[2]) or validated rational-rate parsing. The supplied fragment also appears to lack a closing parenthesis at the end.

Confidence: 99%Severity: 68%
Audit Metadata
Analyzed At
Sep 14, 2026, 11:47 AM
Package URL
pkg:socket/skills-sh/mini-yifan%2Fopen-source-video-gen-skill%2Fbeauty-video-gen%2F@654bb806c2c3d1926329c84be9a3764c045e2ffc32dc336753a2f3d9d66c5e5d