talking-head-production

Warn

Audited by Socket on Jul 23, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: The skill’s media-generation behavior is mostly aligned with its stated purpose and uses inference.sh endpoints consistently, but it introduces moderate trust risk through external CLI dependence and a transitive skill installation (`belt-sh/cli`). No clear credential theft or malicious exfiltration is shown, yet the extra install hop and broad Bash allowance make it riskier than a simple documentation skill.

Confidence: 84%Severity: 58%
Audit Metadata
Analyzed At
Jul 23, 2026, 06:06 PM
Package URL
pkg:socket/skills-sh/magentosh%2Fskills%2Ftalking-head-production%2F@18f353b88a0e7c5cb6037f62d77651260e30bd776d2a0299b6267143726007d7
Security Audit — socket — talking-head-production