creator-teardown

Warn

Audited by Socket on Oct 14, 2026

1 alert found:

Anomaly
AnomalyLOW
scripts/_progress.py

The code is a local progress-reporting helper with a demo. It contains no evident malware or obfuscation. However, if an attacker can modify state.json, its home_py field can select an arbitrary Python file for execution when a matching active job passes the checks. Risk depends on the integrity protections around that state file.

Confidence: 97%Severity: 62%
Audit Metadata
Analyzed At
Oct 14, 2026, 10:54 AM
Package URL
pkg:socket/skills-sh/nextwork-projects%2Fai-video-editor-cooked%2Fcreator-teardown%2F@d503ea44c9d623b3c105550007259ac9cbc34c4efb8b26c29f0802dc94d9ebd3