commission-video-format-skill
Warn
Audited by Socket on Jul 10, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS: the overall workflow matches its stated purpose, and the Linear push is gated by user approval, but the skill materially relies on an unverifiable local /watch:watch plugin and forwards API credentials to it. That dependency risk is disproportionate enough to raise concern even though the visible data flows otherwise align with research and ticket drafting.
Confidence: 82%Severity: 82%
Audit Metadata