learn-movie

Warn

Audited by Socket on Mar 17, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS. The core capability matches the stated purpose of movie analysis and memory storage, and there is no clear credential harvesting or overt exfiltration. However, the unresolved provenance of scillm creates a major install-trust gap, and the skill also introduces transitive trust through task-monitor plus unspecified memory backend routing. The footprint is plausible, but not fully verifiable.

Confidence: 79%Severity: 72%
Audit Metadata
Analyzed At
Mar 17, 2026, 06:40 AM
Package URL
pkg:socket/skills-sh/grahama1970%2Fagent-skills%2Flearn-movie%2F@0dbb9ed2c7bb027c9fcef4671e24434ee432437c
Security Audit — socket — learn-movie