skills/jkitchin/skillz/video-storytelling/Socket

video-storytelling

Warn

Audited by Socket on Jul 2, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS. The core behavior is coherent for a video-story skill and the known API flow to ElevenLabs is legitimate, but the wildcard tool permission is overly broad and the ffmpeg/script execution path is under-specified. Overall this looks more like an over-permissioned, medium-risk media workflow than confirmed malware.

Confidence: 87%Severity: 64%

Audit Metadata

Analyzed At

Jul 2, 2026, 02:13 PM

Package URL

pkg:socket/skills-sh/jkitchin%2Fskillz%2Fvideo-storytelling%2F@0990696d29e3fed836f0cb958f902f17e0c1b0fd597f685c090b087cba0d2cf6