tiktok-gemini-video-workflow

Warn

Audited by Socket on Aug 14, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS. The main workflow is broadly consistent with automated Feishu-to-Gemini video production and mostly uses official Feishu/Google endpoints, but it has a large operational footprint and a significant transitive supply-chain risk around the non-official, poorly attributable gemini-watermark-remover skill/tool. That unresolved third-party install/use keeps the overall risk high even without direct evidence of overt exfiltration or malware.

Confidence: 84%Severity: 80%
Audit Metadata
Analyzed At
Aug 14, 2026, 01:35 AM
Package URL
pkg:socket/skills-sh/binggandata%2Fbggg-skills%2Ftiktok-gemini-video-workflow%2F@d7b3944bbfdf8186d7684a922c55a6cf58ba447d1f6241b1f8d1b7d8b8e0db8c
Security Audit — socket — tiktok-gemini-video-workflow