d-id-avatar-video

Warn

Audited by Socket on Sep 20, 2026

1 alert found:

Security
SecurityMEDIUM
EVAL.md

Do not use this payload as-is. It presents high rights, impersonation, privacy, secret-handling, and financial-misrepresentation risk. Obtain documented CEO consent and authorization, use an approved non-misleading script with required synthetic-media and financial disclaimers, remove the email and API key from user_data, verify image ownership and source integrity, and implement authenticated webhook or polling plus secure result custody and QA. The fragment shows no direct malware behavior, but the requested generated content could enable harmful deception.

Confidence: 98%Severity: 90%
Audit Metadata
Analyzed At
Sep 20, 2026, 06:42 PM
Package URL
pkg:socket/skills-sh/kiwibapl%2Fgenerative-media-skills%2Fd-id-avatar-video%2F@2a810c09ab56cb5cc59ba76d235f96063c07ff510d2720522ad1d1497402b8d8