ai-marketing-videos

Warn

Audited by Socket on Jul 16, 2026

1 alert found:

Security
SecurityMEDIUM
skill-report.json

No confirmed intent to deploy stealth malware (backdoors/exfiltration routines) is visible in the provided artifact because it is documentation/metadata. However, the quick-start includes a critical supply-chain vulnerability pattern: it instructs users to download a remote script and execute it directly with `sh` (curl -fsSL ... | sh). This should be treated as unacceptable for security-sensitive environments and replaced with a verified installation approach (pinned package, checksum/signature verification, or vendor-provided installer instructions without piping to shell). Treat inference/login usage as a privacy consideration since prompts/campaign content will likely be transmitted to upstream services.

Confidence: 76%Severity: 88%
Audit Metadata
Analyzed At
Jul 16, 2026, 09:16 AM
Package URL
pkg:socket/skills-sh/aiskillstore%2Fmarketplace%2Fai-marketing-videos%2F@c7144b44bb2a2329dd0bfb84a26a80c2ae4c60f220cb979d3ae76aff09eb1b96
Security Audit — socket — ai-marketing-videos