goose-video-local

Warn

Audited by Socket on Oct 26, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: the skill's stated purpose is narrow, but its actual mechanism is broad blind command execution based on upstream answer text. There is no built-in validation or restriction to safe video commands, so the capability is disproportionate to the task even though there is no direct evidence of confirmed malware or hidden exfiltration in the provided text.

Confidence: 87%Severity: 78%
Audit Metadata
Analyzed At
Oct 26, 2026, 08:35 PM
Package URL
pkg:socket/skills-sh/gooseworks-ai%2Fgoose-skills%2Fgoose-video-local%2F@281ec7a55472bcfc53d225150b34e1ec696d3892abffc4f0754fc437eaa4afa4