Shell command execution detected (child_process).
Critical
- Code
- suspicious.dangerous_exec
- Location
- dist/media.js:8
- Evidence
const proc = spawn(ffmpegPath, ["-hide_banner", "-loglevel", "error", "-i", "pipe:0", ...outputArgs, "pipe:1"], {
Security audit
Multimodal Embeddings (OpenAI-compatible)
Security checks for vulnerabilities and agentic risk
Overview
This plugin does what it claims: it adds an OpenAI-compatible multimodal embedding provider and a media-search tool for already indexed memory files.
Before installing, confirm you trust the embedding endpoint you configure, because indexed text and any enabled media from memory extraPaths can be sent there. If you want files to stay local, keep the endpoint on localhost and review any ffmpegPath override.
SkillSpector was not run because this plugin release contains no bundled skills.
Static analysis
Detected: suspicious.dangerous_exec