ai-content-pipeline
Warn
Audited by Socket on Sep 19, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS: the stated purpose matches the media-pipeline capabilities, and the installer appears to be official same-org infrastructure rather than an unrelated payload. The main concerns are transitive trust from installing other skills, mutable remote install/bootstrap paths, and an example that extends into public content distribution; these make the skill medium risk but not malicious.
Confidence: 89%Severity: 56%
Audit Metadata