youtube-transcript-note
Warn
Audited by Socket on Jul 30, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS: The core note-generation behavior is coherent, but the skill expands trust substantially by executing an unrevealed local project, invoking other skills, uploading to an external image flow, and making automatic git commits. The biggest concerns are transitive trust and unverifiable local execution provenance, not confirmed malware.
Confidence: 84%Severity: 69%
Audit Metadata