guided-promo-video

Warn

Audited by Socket on Sep 30, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: the skill’s purpose is coherent, and its requested brand/site access is proportionate to video creation, but the core install/execution path is inconsistent with the official Helios documentation located. The main risk is supply-chain trust: unpinned third-party packages and an unverifiable package/CLI naming mismatch for the renderer. Data flow to ElevenLabs is expected for optional music generation and does not by itself suggest exfiltration.

Confidence: 86%Severity: 74%
Audit Metadata
Analyzed At
Sep 30, 2026, 01:46 PM
Package URL
pkg:socket/skills-sh/bintzgavin%2Fhelios-skills%2Fguided-promo-video%2F@c41958b6b326be02a96bcaf0dfb146a0fbeb012e0b0c3e30504883cf2d243380