faceless-explainer

Warn

Audited by Socket on Aug 5, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS. The video-generation purpose mostly matches the capabilities, and the main CLI appears to be an official same-org tool. The main concerns are the silent auto-update instruction, automatic transitive skill updates/dependencies, and reliance on mutable remote skill content before execution. I do not see confirmed malware or clear credential exfiltration, but the trust and visibility model is broader than necessary for a single workflow skill.

Confidence: 84%Severity: 62%
Audit Metadata
Analyzed At
Aug 5, 2026, 03:08 AM
Package URL
pkg:socket/skills-sh/heygen-com%2Fhyperframes%2Ffaceless-explainer%2F@9ad7547f470ab886c876f3979d42b09c521a06216153699b40c7761b6ab6821b
Security Audit — socket — faceless-explainer