skills/aaaaqwq/claude-code-skills/douyin-video-analyst/Socket

douyin-video-analyst

Warn

Audited by Socket on May 2, 2026

1 alert found:

Security

SecuritySKILL.md

MEDIUM

SecurityMEDIUM

SKILL.md

SUSPICIOUS: the stated purpose is coherent, but the skill’s footprint relies on a not-yet-verified douyin-mcp server, reads local MCP config to discover credential context, and forwards API keys to that external tool. mcporter itself looks legitimate, but the unresolved provenance and data flow of douyin-mcp keep overall risk high.

Confidence: 80%Severity: 82%

Audit Metadata

Analyzed At

May 2, 2026, 01:04 PM

Package URL

pkg:socket/skills-sh/aaaaqwq%2Fclaude-code-skills%2Fdouyin-video-analyst%2F@58e224b2b3f1d627258cde3d10e0a53e262c4d4d