vmake-video-remove-watermark

Warn

Audited by Socket on Oct 2, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS. The skill’s purpose and capabilities mostly align with a legitimate media-processing workflow, and it avoids obvious credential theft patterns. The main issue is install/execution trust: it depends on a third-party CLI from npm whose official publisher relationship and documentation could not be verified, while that CLI receives user media and manages authentication/upload behavior as a black box.

Confidence: 83%Severity: 72%
Audit Metadata
Analyzed At
Oct 2, 2026, 02:34 PM
Package URL
pkg:socket/skills-sh/meitu%2Fvmake-skills%2Fvmake-video-remove-watermark%2F@d8f2b3c0d86b4ccc1ade442e50cb10f1a415c2bb2c6c964dd9d861d4444c9b83