cube-spin

Warn

Audited by Socket on Oct 22, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS. The stated capability fits the purpose of a video effect skill, and no credential theft or overt exfiltration is visible. However, it relies on a transitive `video-effects` skill and additional tooling whose provenance is not verifiable from this file, creating a high supply-chain trust risk disproportionate to the minimal detail provided here.

Confidence: 88%Severity: 72%
Audit Metadata
Analyzed At
Oct 22, 2026, 08:59 AM
Package URL
pkg:socket/skills-sh/charlie947%2Freel-editing-skills%2Fcube-spin%2F@d400e9f2f7235d3113ee69ded6696367988047279969990192dd9fd0ca6edba6