cli-anything-videocaptioner

Warn

Audited by Socket on Sep 15, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS. The skill’s capabilities fit its stated video-captioning purpose, and the backend dependency appears legitimate. However, the primary install instruction is internally inconsistent with the publisher’s own registry and known issue tracker, which undermines install trust and creates supply-chain confusion. No clear credential theft or exfiltration is shown, but the broken/incorrect distribution path is enough to treat the skill as suspicious rather than benign.

Confidence: 91%Severity: 58%
Audit Metadata
Analyzed At
Sep 15, 2026, 08:18 AM
Package URL
pkg:socket/skills-sh/hkuds%2Fcli-anything%2Fcli-anything-videocaptioner%2F@f527ecf5bee31a90e9232d115a38c750f28cf68d9fa4feba0ad43404c066dc2b
Security Audit — socket — cli-anything-videocaptioner