studio-script

Warn

Audited by Socket on Oct 14, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS. The core writing and local-file behavior matches the stated purpose, and yt-dlp usage is broadly coherent and verifiable. The main concern is the optional viral-research path: it installs and relies on Treg, a third-party proxy CLI distributed via curl|sh, and routes social/account data through treg.to instead of direct official APIs. That makes the skill internally mixed: mostly benign scriptwriting, with a medium-risk intermediary dependency for social research.

Confidence: 84%Severity: 59%
Audit Metadata
Analyzed At
Oct 14, 2026, 03:49 AM
Package URL
pkg:socket/skills-sh/melvynx%2Fvideo-agent-skills%2Fstudio-script%2F@fe060039aabebf7c62f5dfb2ef636624b6a8938489cbec8dfcfd589ab263fd8b