marketing-studio-agent
Warn
Audited by Socket on Jul 10, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS. The stated purpose matches marketing/video generation, but the trust model is weaker than expected: the skill directs users to clone and execute a separate repo from a different publisher identity, then install additional skills into Claude Code. Credential scope is mostly proportionate, and there is no clear evidence of exfiltration or malware, but provenance and transitive installation concerns make this medium-to-high risk.
Confidence: 82%Severity: 72%
Audit Metadata