animate-character

This appears to be a video-to-sprite-sheet utility, not malware. However, it executes shell commands built from user-controlled arguments, creating command-injection risk when those arguments are untrusted. The unescaped name can also affect generated snippets and output paths. Restrict and validate arguments or invoke tools with safe argument arrays.