video-to-subtitle-summary

Warn

Audited by Socket on Jul 19, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: the skill's subtitle/summarization behavior is mostly aligned with its stated purpose, but it relies heavily on third-party intermediary services for video resolution and forwards credentials and user media to them. Official tools like yt-dlp, ffmpeg, and faster-whisper reduce concern, yet the non-official AI Douyin proxy, raw .env secret reading, and unseen helper installer keep overall risk in the medium-high range.

Confidence: 87%Severity: 72%
Audit Metadata
Analyzed At
Jul 19, 2026, 02:01 PM
Package URL
pkg:socket/skills-sh/imlewc%2Fvideo-to-subtitle-summary-skill%2Fvideo-to-subtitle-summary%2F@50598e25e9962b3f7fef3c7d73c066c00d3ecb87
Security Audit — socket — video-to-subtitle-summary