skills/heygen-com/hyperframes/pr-to-video/Socket

pr-to-video

Warn

Audited by Socket on Aug 5, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: the core PR-to-video workflow is broadly coherent, and the main network endpoints appear purpose-aligned, but the skill includes a hidden self-update, transitive skill/block installation, and reduced user visibility. This is not confirmed malware, yet it carries meaningful supply-chain and trust risk disproportionate to a normal content-production skill.

Confidence: 86%Severity: 67%

Audit Metadata

Analyzed At

Aug 5, 2026, 03:13 AM

Package URL

pkg:socket/skills-sh/heygen-com%2Fhyperframes%2Fpr-to-video%2F@69a2be5b8af27e712fbacb4358134421bcbcc01d1eaf48c4ebf50f95c1a1032a