learn-movie
Warn
Audited by Socket on Mar 17, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS. The core capability matches the stated purpose of movie analysis and memory storage, and there is no clear credential harvesting or overt exfiltration. However, the unresolved provenance of scillm creates a major install-trust gap, and the skill also introduces transitive trust through task-monitor plus unspecified memory backend routing. The footprint is plausible, but not fully verifiable.
Confidence: 79%Severity: 72%
Audit Metadata