skills/214140846/ai-media-generator/ai-media-cli/Socket

ai-media-cli

Warn

Audited by Socket on Mar 22, 2026

1 alert found:

Security

SecuritySKILL.md

MEDIUM

SecurityMEDIUM

SKILL.md

SUSPICIOUS: the skill’s stated purpose is coherent, and its requested credentials are proportionate, but the install path and CLI provenance are not verifiable from the supplied evidence. The main risk is onboarding users to install an unspecified external package and provide API keys to a CLI not confirmed as an official release from ricebowl.ai or sora2.cloud.

Confidence: 80%Severity: 72%

Audit Metadata

Analyzed At

Mar 22, 2026, 04:18 AM

Package URL

pkg:socket/skills-sh/214140846%2Fai-media-generator%2Fai-media-cli%2F@dd317cd41dd2bc654c4802a3b0226c090a85b36a