registry / motionrender / 0.2.4
motionrender@0.2.4
JSON-first, frame-deterministic motion graphics video engine: render compositions to MP4, WebM, ProRes, GIF or PNG frames from Node or the command line.
AI Security Review
scanned 3h ago · by lpm-firewall-aiThe flagged credential and network behavior belongs to provider-specific AI requests, with keys sent to the selected provider’s configured endpoint. The source reviewed does not show automatic credential collection, unrelated transmission, or install-time or import-time execution of these requests.
Static reason
One or more suspicious static signals were detected.
Trigger
A user invokes a CLI feature that renders or uses an AI provider, or configures a render worker.
Impact
Expected provider or worker processing of user-requested prompts, compositions, and render jobs.
Mechanism
AI credentials and prompts go to the selected provider endpoint; rendering can send a token to the configured worker URL.
AI rationale
The flagged credential and network behavior belongs to provider-specific AI requests, with keys sent to the selected provider’s configured endpoint. The source reviewed does not show automatic credential collection, unrelated transmission, or install-time or import-time execution of these requests.
Network endpoints5
api.groq.comapi.anthropic.comintegrate.api.nvidia.comlocalhost:3001Provider or worker URLs supplied through configuration or environment variables
Decision evidence
public snapshotAI called this Clean at 93.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The manifest describes a motion graphics rendering engine and exposes its CLI separately from the library entry point.
- Provider credentials are read for the selected AI provider, whose base URL defaults to that provider’s API or to localhost for the OpenAI-compatible provider.
- AI requests send the selected provider’s credential to its configured API endpoint as part of the AI feature.
- The CLI processes supplied arguments to choose a command; the provider requests are not shown as install-time or import-time actions.
- The render-worker helper sends its token to the URL supplied to that helper for rendering.
Evidence against
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsEvalFilesystemNetwork
HighEntropyStringsMinifiedPossibleObfuscationTelemetryUrlStrings
Source & flagged code
7 flaggeddist/index.jsView file
865// packages/core/src/media.ts
L866: import { spawn as spawn2 } from "node:child_process";
L867: import { mkdir, readFile as readFile2, stat as stat2, writeFile } from "node:fs/promises";
High
studio/assets/index-BGdqA-kT.jsView file
9`).replace(Gv,"")}function zh(t,l){return l=Nh(l),Nh(t)===l}function xt(t,l,e,a,n,u){switch(e){case"children":if(typeof a=="string")l==="body"||l==="textarea"&&a===""||Ma(t,a);else...
L10: `)}):null]})]})})}const p1=O.forwardRef(function({detail:m,startFrame:x},r){const E=O.useRef(null),M=O.useRef(null),[D,V]=O.useState(x),[B,G]=O.useState(!1),[T,d]=O.useState(""),[C...
Low
Eval
Package source references a known benign dynamic code generation pattern.
studio/assets/index-BGdqA-kT.jsView on unpkg · L9dist/cli.jsView file
Findings
5 High4 Medium5 Low
HighChild Processdist/index.js
HighSame File Env Network Executiondist/cli.js
HighCredential Redirect Persistencedist/cli.js
HighCommand Output Exfiltrationdist/cli.js
HighCross File Remote Execution Contextdist/cli.js
MediumDynamic Requiredist/cli.js
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
LowEvalstudio/assets/index-BGdqA-kT.js
LowFilesystem
LowHigh Entropy Strings
LowTelemetry
LowUrl Strings
Affected versions and remediation
This report applies to motionrender@0.2.4.
See all versions of motionrender for other recorded verdicts.
- Review the evidence and your use of motionrender@0.2.4 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.