video-spec-builder

Warn

Audited by Socket on Jul 6, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the core spec-authoring behavior is coherent, and the referenced HyperFrames CLI appears to be officially published, but the skill’s footprint extends beyond requirement gathering into web research, rendering/validation operations, and especially transitive installation of another skill. That scope expansion and external-content handling make it riskier than a normal documentation or spec-builder skill, though not clearly malicious.

Confidence: 87%Severity: 62%
Audit Metadata
Analyzed At
Jul 6, 2026, 01:59 PM
Package URL
pkg:socket/skills-sh/liangdabiao%2Fhyperframes-fix%2Fvideo-spec-builder%2F@17b933d8eafa82cfe504ca77b383ac2e9ee66543d05993dcb047637a4a971b96
Security Audit — socket — video-spec-builder