skills/jeremylongshore/tons-of-skills-marketplace/demo-video/Socket

demo-video

Warn

Audited by Socket on Sep 9, 2026

1 alert found:

Security

SecuritySKILL.md

MEDIUM

SecurityMEDIUM

SKILL.md

SUSPICIOUS: the video-generation purpose is plausible, and FFmpeg/Playwright/Edge TTS usage is proportionate, but the install path is inconsistent and routes trust through an unrelated personal marketplace repo with unpinned plugin installation. Main risk is supply-chain/transitive plugin trust rather than confirmed malicious behavior.

Confidence: 89%Severity: 76%

Audit Metadata

Analyzed At

Sep 9, 2026, 03:54 AM

Package URL

pkg:socket/skills-sh/jeremylongshore%2Ftons-of-skills-marketplace%2Fdemo-video%2F@81d09725c68067992dac74396b1debdebfcc5a4897497a1ee2af55c40e6be93d