wan-cover-plus
Warn
Audited by Socket on Sep 14, 2026
1 alert found:
AnomalyAnomalyscripts/prompt_builder.py
LOWAnomalyLOW
scripts/prompt_builder.py
The code appears intended for prompt construction and does not show evidence of malware or deliberate data theft. It contains significant implementation errors and a potential path-traversal file-read vulnerability because `scene` and `style` are interpolated into paths without validation. Restrict these values to approved filenames, resolve paths and verify they remain under the assets directory, and fix the undefined variables and missing task-builder functions.
Confidence: 98%Severity: 63%
Audit Metadata