skills/inference-sh/skills/ai-avatar-video/Socket

ai-avatar-video

Warn

Audited by Socket on Sep 19, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: the core media-generation purpose is coherent and the main API/data flow appears to go to official inference.sh services, but the skill unnecessarily installs other skills and starts with a publisher-mismatched transitive install (`belt-sh/cli`). The biggest risk is trust-chain expansion, not overt malware or exfiltration.

Confidence: 90%Severity: 61%

Audit Metadata

Analyzed At

Sep 19, 2026, 10:23 AM

Package URL

pkg:socket/skills-sh/inference-sh%2Fskills%2Fai-avatar-video%2F@d28dcab298c8bdcd44c8e87b7cf281446e8c93bbb61aaffacf7e873949898d53