video-toolkit

Warn

Audited by Socket on Apr 4, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: The skill is broadly coherent with its stated purpose of autonomous video creation, and its main network/data flows align with official Modal and Remotion usage. However, it relies on a third-party toolkit repo distinct from the skill publisher, installs and executes many dependencies, and forwards multiple secrets to cloud services; this is proportionate but still medium risk rather than clearly benign.

Confidence: 84%Severity: 61%
Audit Metadata
Analyzed At
Apr 4, 2026, 11:02 PM
Package URL
pkg:socket/skills-sh/calesthio%2FOpenMontage%2Fvideo-toolkit%2F@32781da594d977f34ee1d4d8f9319a1ceb231c23
Security Audit — socket — video-toolkit