remotion-beautiful-videos

Warn

Audited by Socket on Oct 6, 2026

1 alert found:

Anomaly
AnomalyLOW
scripts/beat-sync.ts

The code is a local audio-analysis utility and shows no apparent data theft, network activity, persistence, or destructive behavior. The unescaped audio-path interpolation into shell commands creates a command-injection risk for attacker-controlled paths. Validate the path and invoke subprocesses without a shell (argument arrays); also bound and validate FPS. The supplied fragment is syntactically incomplete.

Confidence: 99%Severity: 64%
Audit Metadata
Analyzed At
Oct 6, 2026, 11:22 AM
Package URL
pkg:socket/skills-sh/norahe0304-art%2Fremotion-video-skill%2Fremotion-beautiful-videos%2F@a98f307f595273a3ad193d7761cb8ab5d905a495