skills/hosseinmirzapur/opencode-skills/youtube-clipper/Socket

youtube-clipper

Warn

Audited by Socket on Aug 2, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS. This catalog skill is mostly a pointer to a separately hosted upstream skill, so its main security footprint is transitive installation trust. No direct credential access, exfiltration, or hidden execution appears in the provided file, but asking the agent to install another skill from a personal GitHub repo is a meaningful medium risk.

Confidence: 87%Severity: 62%

Audit Metadata

Analyzed At

Aug 2, 2026, 03:59 PM

Package URL

pkg:socket/skills-sh/hosseinmirzapur%2Fopencode-skills%2Fyoutube-clipper%2F@51be66025f30dd19192c12fb2978ff6e94528768f54f0cc1810cea9733bd4b75