app-sizzle

Warn

Audited by Socket on Jul 21, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: The skill’s media-processing behavior is broadly aligned with its stated purpose, and it includes useful spending controls. The main risk is trust, not intent: it relies on an external MCP stack and a transitive companion-skill install whose public provenance is not clearly verifiable from the supplied evidence, so overall risk is medium.

Confidence: 83%Severity: 66%
Audit Metadata
Analyzed At
Jul 21, 2026, 09:00 AM
Package URL
pkg:socket/skills-sh/Pika-Labs%2FPika-Plugins%2Fapp-sizzle%2F@4b2f92dbdad5f6dbe34a454af3e4aa84c8755bbd7bd95bb31f1a1b24ae590917
Security Audit — socket — app-sizzle