studio-script
Warn
Audited by Socket on Oct 14, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS. The core writing and local-file behavior matches the stated purpose, and yt-dlp usage is broadly coherent and verifiable. The main concern is the optional viral-research path: it installs and relies on Treg, a third-party proxy CLI distributed via curl|sh, and routes social/account data through treg.to instead of direct official APIs. That makes the skill internally mixed: mostly benign scriptwriting, with a medium-risk intermediary dependency for social research.
Confidence: 84%Severity: 59%
Audit Metadata