hyperframes
Warn
Audited by Socket on Sep 26, 2026
1 alert found:
AnomalyAnomalyscripts/build-montage.cjs
LOWAnomalyLOW
scripts/build-montage.cjs
This is a video montage-generation script with no evident malicious payload or data exfiltration. Its use of shell-interpolated execSync commands with insufficient escaping and validation creates a command-injection risk if configuration values or clip filenames are attacker-controlled. Clip paths also permit traversal outside the intended clips directory.
Confidence: 98%Severity: 63%
Audit Metadata