vox-explainer

Warn

Audited by Socket on Aug 26, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the video-production purpose broadly matches the capabilities, and most data stays local, but the skill materially expands trust by instructing the agent to install another skill through a separate third-party skills ecosystem. Combined with external-content ingestion and build execution, this is more than a simple documentation workflow and carries medium supply-chain and prompt-injection risk.

Confidence: 86%Severity: 62%
Audit Metadata
Analyzed At
Aug 26, 2026, 10:20 AM
Package URL
pkg:socket/skills-sh/heygen-com%2Fhyperframes-community-skills%2Fvox-explainer%2F@3231a094ddcc61c8b6e85b34f5573bd1a6e233168c20fdde74c8eab66ed24f5a
Security Audit — socket — vox-explainer