motion-video-production
Warn
Audited by Socket on Oct 31, 2026
1 alert found:
AnomalyAnomalyscripts/mix-mux.sh
LOWAnomalyLOW
scripts/mix-mux.sh
The script has a Python code-injection risk because fps and seconds are interpolated into python3 -c without validation. This is a security issue if those arguments can be controlled by an untrusted party; it is not evidence of intentional malware. Validate them as numeric values and calculate the frame count without constructing executable source.
Confidence: 98%Severity: 58%
Audit Metadata