skills/nexu-io/open-design/video-downloader/Socket

video-downloader

Warn

Audited by Socket on Sep 14, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: the catalog entry is lightweight and not directly malicious, but it instructs installation of an upstream skill bundle, creating a transitive trust/supply-chain risk without pinning or self-contained review. No direct credential theft or exfiltration is visible in this artifact alone.

Confidence: 85%Severity: 58%

Audit Metadata

Analyzed At

Sep 14, 2026, 05:59 PM

Package URL

pkg:socket/skills-sh/nexu-io%2Fopen-design%2Fvideo-downloader%2F@79ee8d172b53b6cc76c987202996abf986f2e15608c0ab12237eacf2eb31f8fa