youtube-transcript-note

Warn

Audited by Socket on Jul 30, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: The core note-generation behavior is coherent, but the skill expands trust substantially by executing an unrevealed local project, invoking other skills, uploading to an external image flow, and making automatic git commits. The biggest concerns are transitive trust and unverifiable local execution provenance, not confirmed malware.

Confidence: 84%Severity: 69%
Audit Metadata
Analyzed At
Jul 30, 2026, 06:08 PM
Package URL
pkg:socket/skills-sh/gkwa%2Fvolcanicviper%2Fyoutube-transcript-note%2F@1992b395e5160996846ffbb5238dbc7480a2c09c41cb807486d53508ba4b4d98
Security Audit — socket — youtube-transcript-note