video-to-subtitle-summary
Warn
Audited by Socket on Jul 19, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS: the skill's subtitle/summarization behavior is mostly aligned with its stated purpose, but it relies heavily on third-party intermediary services for video resolution and forwards credentials and user media to them. Official tools like yt-dlp, ffmpeg, and faster-whisper reduce concern, yet the non-official AI Douyin proxy, raw .env secret reading, and unseen helper installer keep overall risk in the medium-high range.
Confidence: 87%Severity: 72%
Audit Metadata