moviepilot-api

Warn

Audited by Socket on May 10, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: The skill is purpose-aligned as a MoviePilot API wrapper, but its scope is extremely broad and includes powerful administrative actions, persistent credential storage, and some query-parameter secret handling. No obvious third-party exfiltration or malicious mismatch is shown, but the skill should be treated as a high-privilege admin interface rather than a narrow media helper.

Confidence: 82%Severity: 64%
Audit Metadata
Analyzed At
May 10, 2026, 12:54 AM
Package URL
pkg:socket/skills-sh/jxxghp%2Fmoviepilot%2Fmoviepilot-api%2F@d6be2949bbf3daee64404976bac52691f32a76bd
Security Audit — socket — moviepilot-api