genmedia
Warn
Audited by Socket on Apr 24, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS: The workflow fits media generation, but its core dependency is an undocumented `genmedia` CLI whose provenance cannot be verified against fal’s official tooling. Because an unverifiable external binary likely receives API credentials and handles uploads/downloads, the skill carries high supply-chain and credential-forwarding risk despite otherwise plausible purpose alignment.
Confidence: 86%Severity: 84%
Audit Metadata