skills/hosseinmirzapur/opencode-skills/fal-lip-sync/Socket

fal-lip-sync

Warn

Audited by Socket on Aug 26, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS. The catalog entry is not overtly malicious and aligns with its stated fal.ai lip-sync purpose, but it defers actual behavior to an upstream bundle and likely installer chain that introduces medium supply-chain and credential-forwarding risk. No direct malicious or exfiltration behavior is present in this file alone.

Confidence: 85%Severity: 56%

Audit Metadata

Analyzed At

Aug 26, 2026, 05:56 PM

Package URL

pkg:socket/skills-sh/hosseinmirzapur%2Fopencode-skills%2Ffal-lip-sync%2F@bf023e9d7032fb301a4457d3a055648e56dcffc03b4dbb091852398f80099526