image-to-video
Warn
Audited by Socket on Sep 19, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS. The stated purpose matches media-generation behavior, and data appears routed to the vendor's own platform rather than an unrelated proxy. However, the skill's core function depends on installing another skill and encourages several additional skill installs, creating a substantial transitive-trust risk; the official remote installer also adds moderate supply-chain exposure.
Confidence: 91%Severity: 74%
Audit Metadata