registry / free-short-video / 5.3.0
free-short-video@5.3.0
Free AI short-video generator — run the full free-short-video service locally with one command. Text-to-video, image generation, Edge-TTS narration, subtitles, and compositing, all free.
Static Scan Results
scanned 3mo ago · by rust-scannerStatic analysis flagged 8 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.
Static reason
One or more suspicious static signals were detected.
Decision evidence
public snapshotBehavioral surface
ChildProcessEnvironmentVarsFilesystem
HighEntropyStringsUrlStrings
Source & flagged code
2 flaggedbin/cli.jsView file
16L17: const { spawn, execSync } = require('child_process');
L18: const fs = require('fs');
...
L21:
L22: const PKG_ROOT = path.resolve(__dirname, '..');
L23:
...
L91: function venvBin(name) {
L92: return process.platform === 'win32'
L93: ? path.join(PKG_ROOT, '.venv', 'Scripts', `${name}.exe`)
...
L107: console.error(' Ubuntu: sudo apt install python3 python3-venv');
L108: console.error(' Windows: https://www.python.org/downloads/');
L109: process.exit(1);
High
Sandbox Evasion Gated Capability
Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.
bin/cli.jsView on unpkg · L16server.pyView file
•path = server.py
kind = build_helper
sizeBytes = 6170
magicHex = [redacted]
Medium
Findings
1 High3 Medium4 Low
HighSandbox Evasion Gated Capabilitybin/cli.js
MediumEnvironment Vars
MediumShips Build Helperserver.py
MediumStructural Risk Force Deep Review
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
Affected versions and remediation
This report applies to free-short-video@5.3.0.
See all versions of free-short-video for other recorded verdicts.
- Review the evidence and your use of free-short-video@5.3.0 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.