dlstreamer-coding-agent

Warn

Audited by Socket on Oct 30, 2026

1 alert found:

Anomaly
AnomalyLOW
assets/cpp-app-template.cpp

No clear malware, persistence, credential theft, reverse shell, cryptomining, or network exfiltration behavior is present. The main security issue is unsafe construction of a GStreamer pipeline from unescaped command-line values, especially input URIs, output paths, and device values. This can cause denial of service or potentially pipeline-element injection when arguments are attacker-controlled. RTSP credentials may also be exposed in console output. Use GStreamer API element properties or rigorously escape and allowlist all dynamic values.

Confidence: 96%Severity: 58%
Audit Metadata
Analyzed At
Oct 30, 2026, 04:38 PM
Package URL
pkg:socket/skills-sh/open-edge-platform%2Fdlstreamer%2Fdlstreamer-coding-agent%2F@1a8a3b707afb6d523a4b21c00d9228d33b424fa0970fea0a59099906f53df23d