commission-video-format-skill

Warn

Audited by Socket on Jul 10, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: the overall workflow matches its stated purpose, and the Linear push is gated by user approval, but the skill materially relies on an unverifiable local /watch:watch plugin and forwards API credentials to it. That dependency risk is disproportionate enough to raise concern even though the visible data flows otherwise align with research and ticket drafting.

Confidence: 82%Severity: 82%
Audit Metadata
Analyzed At
Jul 10, 2026, 03:12 PM
Package URL
pkg:socket/skills-sh/gooseworks-ai%2Fgooseworks-ads-skills%2Fcommission-video-format-skill%2F@4d6b8a20de6d89cf26606c3a73487a53ce39fb4d24147ae2cd17894ef3f8bb9a
Security Audit — socket — commission-video-format-skill