skills/inference-sh/skills/google-veo/Socket

google-veo

Warn

Audited by Socket on Sep 18, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS. The core video-generation purpose is coherent, but the skill's footprint relies on transitive skill installation and a third-party inference platform rather than direct Google tooling. Same-org documentation and verifiable release paths reduce concern, so this is not confirmed malware, but the trust chain and delegated credential/data flow make it medium risk.

Confidence: 88%Severity: 58%

Audit Metadata

Analyzed At

Sep 18, 2026, 09:29 PM

Package URL

pkg:socket/skills-sh/inference-sh%2Fskills%2Fgoogle-veo%2F@10331d7f5f90fb3b2a0a33af723e005062494e89acbaa8a375b4fbc8c124ee5f