demo-video
Warn
Audited by Socket on Aug 21, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS: the stated purpose is coherent, but the install path is not. The skill claims a Framecraft workflow tied to vaddisrinivas/framecraft yet instructs installation from a different third-party marketplace publisher, creating a disproportionate supply-chain and transitive-plugin risk. Data flows for TTS and rendering fit the purpose, so this is not confirmed malware, but the execution trust model is weak enough to rate as high security risk.
Confidence: 84%Severity: 72%
Audit Metadata