talking-head-production
Warn
Audited by Socket on Jul 23, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS: The skill’s media-generation behavior is mostly aligned with its stated purpose and uses inference.sh endpoints consistently, but it introduces moderate trust risk through external CLI dependence and a transitive skill installation (`belt-sh/cli`). No clear credential theft or malicious exfiltration is shown, yet the extra install hop and broad Bash allowance make it riskier than a simple documentation skill.
Confidence: 84%Severity: 58%
Audit Metadata