talking-head-production

Warn

Audited by Socket on Sep 14, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: The skill's video-production behavior is purpose-consistent, and the main CLI dependency appears to be the official inference.sh tool. The main risk is trust-chain expansion: it asks the agent to install another skill (`belt-sh/cli`) with unclear first-party provenance from the provided evidence, and it repeats transitive skill-install patterns. No credential harvesting, unrelated file access, or exfiltration behavior is evident.

Confidence: 87%Severity: 58%
Audit Metadata
Analyzed At
Sep 14, 2026, 05:53 PM
Package URL
pkg:socket/skills-sh/bankai-skills%2Fsuperpowers%2Ftalking-head-production%2F@0fb147d1f11a505217b324677e0d5545deb6b5685b7677669de4e1d172b228ba
Security Audit — socket — talking-head-production