cawcut-generate
Warn
Audited by Socket on Jul 15, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
Mostly coherent media-generation skill using a dedicated CawCut CLI, but it asks the agent to trust and operate that CLI extensively: install/upgrade it, authenticate through it, upload user media through it, and auto-download results. No clear exfiltration or deceptive data flow is visible from the skill text alone, yet the external-CLI dependency and autonomous Bash actions make it medium-risk and better classified as suspicious than fully benign.
Confidence: 82%Severity: 58%
Audit Metadata