motion-video-production

Warn

Audited by Socket on Oct 31, 2026

1 alert found:

Anomaly
AnomalyLOW
scripts/mix-mux.sh

The script has a Python code-injection risk because fps and seconds are interpolated into python3 -c without validation. This is a security issue if those arguments can be controlled by an untrusted party; it is not evidence of intentional malware. Validate them as numeric values and calculate the frame count without constructing executable source.

Confidence: 98%Severity: 58%
Audit Metadata
Analyzed At
Oct 31, 2026, 06:17 AM
Package URL
pkg:socket/skills-sh/unclejobs-ai%2Fmotion-video-skill%2Fmotion-video-production%2F@d80ecc09ba3cd24d9b9f3bdb9675cb958465b2aabc9a2e19f9d7ae56146ce032