remotion-beautiful-videos
Warn
Audited by Socket on Oct 6, 2026
1 alert found:
AnomalyAnomalyscripts/beat-sync.ts
LOWAnomalyLOW
scripts/beat-sync.ts
The code is a local audio-analysis utility and shows no apparent data theft, network activity, persistence, or destructive behavior. The unescaped audio-path interpolation into shell commands creates a command-injection risk for attacker-controlled paths. Validate the path and invoke subprocesses without a shell (argument arrays); also bound and validate FPS. The supplied fragment is syntactically incomplete.
Confidence: 99%Severity: 64%
Audit Metadata