clip

No strong evidence of intentional malware/backdoor behavior is present in this module. The primary security risk is in --sidecars mode: generated output paths are derived directly from untrusted c.path values in a user-provided JSON without path normalization or containment checks, enabling potential arbitrary file overwrite (under the running user’s permissions). A secondary risk surface exists from dynamic ffmpeg filter arguments passed to execFile, which is less likely to be shell-injection but still merits review of upstream filter construction/sanitization. Overall risk is medium, driven by the sidecars path-to-write behavior rather than overt malicious capabilities.