skills/full-aigc-skills/jianying-skills/jianying-subtitles/Socket

jianying-subtitles

Warn

Audited by Socket on Sep 19, 2026

1 alert found:

Security

SecuritySKILL.md

MEDIUM

SecurityMEDIUM

SKILL.md

SUSPICIOUS: the documented behavior is narrowly aligned to subtitle editing and includes strong safety boundaries, but the skill’s core dependency is an unverified external `jianying` CLI with no install or publisher provenance. The main risk is supply-chain trust, not overt exfiltration or credential theft.

Confidence: 87%Severity: 72%

Audit Metadata

Analyzed At

Sep 19, 2026, 11:56 PM

Package URL

pkg:socket/skills-sh/full-aigc-skills%2Fjianying-skills%2Fjianying-subtitles%2F@4105f8ac5b107a8536d1a459f1647d61b3ce432e1873f87b0bbae7fe1f0cd949