watch

Warn

Audited by Socket on Aug 8, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the stated capabilities fit a video-analysis skill, and the requested tools are broadly proportionate, but the skill delegates nearly all logic to an external CLI and permits runtime downloading of ffmpeg/yt-dlp. Optional cloud uploads and API-key forwarding are disclosed and plausible, yet they rely on trusting opaque engine behavior not present in the skill itself.

Confidence: 80%Severity: 58%
Audit Metadata
Analyzed At
Aug 8, 2026, 08:26 PM
Package URL
pkg:socket/skills-sh/oxbshw%2Fwatch-skill%2Fwatch%2F@c43bbbbd72b2c6390f74e8dcaaedd10ff2c06a438533796dbfcabe687076837a
Security Audit — socket — watch