edl-edit
Warn
Audited by Socket on Aug 30, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS due to install-trust uncertainty, not overt malicious behavior. The editing purpose is coherent and the scope is proportionate, but `uv run video-agent` introduces an unpinned, unresolved external tool dependency whose publisher and release provenance are not established in the skill text; that alone raises supply-chain risk materially.
Confidence: 85%Severity: 72%
Audit Metadata