guided-promo-video
Warn
Audited by Socket on Sep 30, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS: the skill’s purpose is coherent, and its requested brand/site access is proportionate to video creation, but the core install/execution path is inconsistent with the official Helios documentation located. The main risk is supply-chain trust: unpinned third-party packages and an unverifiable package/CLI naming mismatch for the renderer. Data flow to ElevenLabs is expected for optional music generation and does not by itself suggest exfiltration.
Confidence: 86%Severity: 74%
Audit Metadata