skills/nexu-io/motion-anything/web-shader-extractor/Socket

web-shader-extractor

Warn

Audited by Socket on Jul 18, 2026

1 alert found:

Security

SecuritySKILL.md

MEDIUM

SecurityMEDIUM

SKILL.md

SUSPICIOUS: the stated purpose is plausible, but this wrapper mainly serves to install and delegate to an external third-party skill. The main risk is transitive trust: users cannot assess the actual behavior from this wrapper, and the fetched upstream skill may act with the agent's full permissions.

Confidence: 86%Severity: 81%

Audit Metadata

Analyzed At

Jul 18, 2026, 08:44 AM

Package URL

pkg:socket/skills-sh/nexu-io%2Fmotion-anything%2Fweb-shader-extractor%2F@adb5bf2df4404c013bd6abdd81f6db2b303e981861216450632c77215adbd5fc