vox-explainer
Warn
Audited by Socket on Aug 26, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS: the video-production purpose broadly matches the capabilities, and most data stays local, but the skill materially expands trust by instructing the agent to install another skill through a separate third-party skills ecosystem. Combined with external-content ingestion and build execution, this is more than a simple documentation workflow and carries medium supply-chain and prompt-injection risk.
Confidence: 86%Severity: 62%
Audit Metadata