skills/minicoohei/ai-agent-camp/video-audio/Socket

video-audio

Warn

Audited by Socket on Jul 30, 2026

1 alert found:

Security

SecuritySKILL.md

MEDIUM

SecurityMEDIUM

SKILL.md

The skill's stated purpose and core behavior are coherent: it sends narration text and an ElevenLabs API key to the official TTS service, then writes audio locally. The main security issue is the undocumented .bin/ffmpeg dependency, which is an unverifiable executable and makes the install/execution trust disproportionally risky despite otherwise consistent data flows.

Confidence: 89%Severity: 72%

Audit Metadata

Analyzed At

Jul 30, 2026, 08:28 PM

Package URL

pkg:socket/skills-sh/minicoohei%2Fai-agent-camp%2Fvideo-audio%2F@3c338bc5e3dd0f3e3fab5c57ca3840a3773606e0171129dfec5c6488fd5a1da4