Video Producer

Warn

Audited by Socket on May 13, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS. The core media-production capabilities largely match the stated purpose, but trust and data-flow controls are weak: it fetches BGM from an unspecified external source, references an unpinned personal-account TTS CLI, and processes arbitrary URLs through browser automation while retaining Bash and file-write access. This is not clearly malicious, but the install/execution trust and external-content exposure are broader than necessary for a tightly scoped video skill.

Confidence: 84%Severity: 64%
Audit Metadata
Analyzed At
May 13, 2026, 06:18 AM
Package URL
pkg:socket/skills-sh/casperliu7%2Fwechat-editor-agent%2Fvideo-producer%2F@c95319efcce6cfdd2e636dfd87df142f33964ebb