local-video-production-m5

Warn

Audited by Socket on Oct 22, 2026

1 alert found:

Anomaly
AnomalyLOW
scripts/m5_env_check.sh

This diagnostic script checks ComfyUI, llama-server, model files, and local MPS status. It contains a hardcoded SSH password and disables host-key verification while connecting to joergpeetz@192[.]168[.]212[.]46, creating a material credential-exposure and man-in-the-middle risk. The visible commands do not indicate malware or unrelated data theft; severity is moderate due to embedded credentials and unauthenticated host identity.

Confidence: 98%Severity: 55%
Audit Metadata
Analyzed At
Oct 22, 2026, 12:11 AM
Package URL
pkg:socket/skills-sh/jpeetz%2Fagent-skills%2Flocal-video-production-m5%2F@7f107abeea778bb3375b831bdb07468cc61a8ba718ecbcb7d65773df63720740