sora

Warn

Audited by Socket on Sep 22, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS. The core behavior is coherent for a Pixazo-based video skill, but it routes content and credentials through a third-party gateway rather than official OpenAI APIs, persists the key locally, and includes an unrelated wildcard skill-install instruction that expands trust far beyond this skill’s purpose.

Confidence: 89%Severity: 62%
Audit Metadata
Analyzed At
Sep 22, 2026, 09:04 PM
Package URL
pkg:socket/skills-sh/pixazo-ai%2Fskills%2Fsora%2F@edf780c2348180c6e986bcb90dd82a62b82b28848a995d0e78b0a0e4ded8785e