analyze-video

Warn

Audited by Socket on Apr 25, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS. The skill’s purpose and core actions are mostly coherent for video analysis, and there is no clear credential theft or exfiltration path. However, a required opaque local binary (`memorex`) performs the core transcript/keyframe step without verifiable provenance in the provided evidence, which is a material supply-chain risk; combined with processing untrusted external media while writing files, this warrants a high security-risk classification rather than benign.

Confidence: 84%Severity: 78%
Audit Metadata
Analyzed At
Apr 25, 2026, 06:37 PM
Package URL
pkg:socket/skills-sh/breethomas%2Fbette%2Fanalyze-video%2F@5b591a73f4ff37b59c8348b8d112c8f459f6df1f