video-processing-editing

Warn

Audited by Socket on Sep 15, 2026

1 alert found:

Security
SecurityMEDIUM
scripts/video_editor.py

The code appears to be a legitimate video editing utility and shows no clear malicious behavior or data exfiltration. It contains a high-impact code-execution vulnerability from evaluating ffprobe-derived data with eval(), plus unsafe ffmpeg filter construction for subtitle paths and predictable temporary-file handling. Replace eval with strict numeric parsing, escape or safely pass subtitle paths, and use secure temporary files and atomic cleanup.

Confidence: 98%Severity: 78%
Audit Metadata
Analyzed At
Sep 15, 2026, 07:43 AM
Package URL
pkg:socket/skills-sh/curiositech%2Fsome_claude_skills%2Fvideo-processing-editing%2F@7c90fd67c9761b7b9a2f4e5865e7f95a5b7fa4375c4799744c14289c007d4c74
Security Audit — socket — video-processing-editing