skills/aiskillstore/marketplace/motion-graphics/Socket

motion-graphics

Warn

Audited by Socket on Aug 8, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: the core motion-graphics purpose matches the tooling, and the main CLI appears to be an official same-org npm package, so this is not confirmed malware. The risk comes from silent self-updating, transitive skill installation/update, and an autonomous workflow that minimizes user review before executing external tooling.

Confidence: 86%Severity: 56%

Audit Metadata

Analyzed At

Aug 8, 2026, 12:10 PM

Package URL

pkg:socket/skills-sh/aiskillstore%2Fmarketplace%2Fmotion-graphics%2F@dc92dc20c46610a5581b3ebaad01e7cc176c1f9078ebeb80c417642a3f8ec3dc