skills/magentosh/skills/google-veo/Socket

google-veo

Warn

Audited by Socket on Jul 23, 2026

1 alert found:

Security

SecuritySKILL.md

MEDIUM

SecurityMEDIUM

SKILL.md

SUSPICIOUS. The stated purpose is coherent, but the skill relies on a transitive skill install and a credentialed third-party CLI/service rather than direct official Google APIs. Install provenance is partly verifiable and better than a random payload, yet the trust chain and credential forwarding make this a medium-high risk skill.

Confidence: 85%Severity: 74%

Audit Metadata

Analyzed At

Jul 23, 2026, 06:06 PM

Package URL

pkg:socket/skills-sh/magentosh%2Fskills%2Fgoogle-veo%2F@c8e989dc89f254340ffa1b9749a927f83ee5e31d6f2ba1ef1f5ca57df79db1dd