goose-video-local
Warn
Audited by Socket on Oct 26, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS: the skill's stated purpose is narrow, but its actual mechanism is broad blind command execution based on upstream answer text. There is no built-in validation or restriction to safe video commands, so the capability is disproportionate to the task even though there is no direct evidence of confirmed malware or hidden exfiltration in the provided text.
Confidence: 87%Severity: 78%
Audit Metadata