hyperframes

Warn

Audited by Socket on Sep 26, 2026

1 alert found:

Anomaly
AnomalyLOW
scripts/build-montage.cjs

This is a video montage-generation script with no evident malicious payload or data exfiltration. Its use of shell-interpolated execSync commands with insufficient escaping and validation creates a command-injection risk if configuration values or clip filenames are attacker-controlled. Clip paths also permit traversal outside the intended clips directory.

Confidence: 98%Severity: 63%
Audit Metadata
Analyzed At
Sep 26, 2026, 07:51 PM
Package URL
pkg:socket/skills-sh/waker240%2Ffullvideoproductionskill%2Fhyperframes%2F@f9ba3896480a5d46f292f8ba1ccc54d8981cc8252a642e6c49b99115e61a9f7c