image-to-video

Warn

Audited by Socket on Jul 23, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: the core purpose is coherent, and inference.sh/Belt usage fits image-to-video generation, but the install story is internally inconsistent. The skill asks the agent to install another skill from `belt-sh/cli` and additional skills later, creating transitive trust risk; combined with CLI login and remote media uploads, this is more exposure than a simple guide should require.

Confidence: 86%Severity: 72%
Audit Metadata
Analyzed At
Jul 23, 2026, 06:06 PM
Package URL
pkg:socket/skills-sh/magentosh%2Fskills%2Fimage-to-video%2F@2599e2ed7a786c90d4d1d559bffec64caf0f0bf1271df3ad09898be8a99039f9
Security Audit — socket — image-to-video