talking-head-production
Warn
Audited by Socket on Jul 7, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS. The functional scope fits talking-head video production, but the skill relies on a transitive skill install, an externally trusted CLI, raw GitHub install docs, and credential forwarding through that CLI. Data flows are consistent with hosted media generation, yet the install/execution trust model is broader and riskier than necessary.
Confidence: 84%Severity: 78%
Audit Metadata