faceless-explainer
Warn
Audited by Socket on Aug 5, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS. The video-generation purpose mostly matches the capabilities, and the main CLI appears to be an official same-org tool. The main concerns are the silent auto-update instruction, automatic transitive skill updates/dependencies, and reliance on mutable remote skill content before execution. I do not see confirmed malware or clear credential exfiltration, but the trust and visibility model is broader than necessary for a single workflow skill.
Confidence: 84%Severity: 62%
Audit Metadata