skills/gooseworks-ai/goose-skills/ugc-fixloop/Socket

ugc-fixloop

Warn

Audited by Socket on Jul 15, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: the core video-stitching capability is coherent, but the skill adds runtime-fetched scripts plus credential-file access and routes prompt review through an internal proxy instead of the official API. That footprint can fit an internal GooseWorks workflow, yet it increases trust and data-flow risk beyond a purely local media utility.

Confidence: 83%Severity: 58%

Audit Metadata

Analyzed At

Jul 15, 2026, 09:42 AM

Package URL

pkg:socket/skills-sh/gooseworks-ai%2Fgoose-skills%2Fugc-fixloop%2F@ef2a2a2590c1329a9a7737eb75a52c3fc0e2facaa22b953220fb4aee03965866