image-to-video
Warn
Audited by Socket on Jul 23, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS: the core purpose is coherent, and inference.sh/Belt usage fits image-to-video generation, but the install story is internally inconsistent. The skill asks the agent to install another skill from `belt-sh/cli` and additional skills later, creating transitive trust risk; combined with CLI login and remote media uploads, this is more exposure than a simple guide should require.
Confidence: 86%Severity: 72%
Audit Metadata