wan-cover-plus

Warn

Audited by Socket on Sep 14, 2026

1 alert found:

Anomaly
AnomalyLOW
scripts/prompt_builder.py

The code appears intended for prompt construction and does not show evidence of malware or deliberate data theft. It contains significant implementation errors and a potential path-traversal file-read vulnerability because `scene` and `style` are interpolated into paths without validation. Restrict these values to approved filenames, resolve paths and verify they remain under the assets directory, and fix the undefined variables and missing task-builder functions.

Confidence: 98%Severity: 63%
Audit Metadata
Analyzed At
Sep 14, 2026, 04:49 PM
Package URL
pkg:socket/skills-sh/wwwzhouhui%2Fskills_collection%2Fwan-cover-plus%2F@ad2ffe26fa92c2a6cff427b6c534a38db5375af895cc9aef168944046be015af