demo-video

Warn

Audited by Socket on Aug 21, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: the stated purpose is coherent, but the install path is not. The skill claims a Framecraft workflow tied to vaddisrinivas/framecraft yet instructs installation from a different third-party marketplace publisher, creating a disproportionate supply-chain and transitive-plugin risk. Data flows for TTS and rendering fit the purpose, so this is not confirmed malware, but the execution trust model is weak enough to rate as high security risk.

Confidence: 84%Severity: 72%
Audit Metadata
Analyzed At
Aug 21, 2026, 02:07 PM
Package URL
pkg:socket/skills-sh/jeremylongshore%2Fclaude-code-plugins-plus-skills%2Fdemo-video%2F@2257f2920115da097e9d812f88099f7e3fdccd08366e65bb1263b6dbeeb63a25
Security Audit — socket — demo-video