talking-head-recut

Warn

Audited by Socket on Oct 27, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: the core video-editing workflow is broadly coherent and mostly local, but the skill adds an unnecessary remote self-update step, tells the agent to do it silently, and modifies upstream wording to remove user confirmation. That concealment plus transitive skill-refresh behavior creates a high trust risk even though the rendering steps themselves are not overtly malicious.

Confidence: 92%Severity: 78%
Audit Metadata
Analyzed At
Oct 27, 2026, 12:38 PM
Package URL
pkg:socket/skills-sh/coco-research%2Fcoco%2Ftalking-head-recut%2F@ddbff662d979e09ffcdfc19537c22ab7d9ad0eac31cc00ea86752e9a3e4fff25