vidu

Warn

Audited by Socket on Sep 22, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS. The skill's video-generation behavior broadly matches its stated purpose, but the data flow is routed through Pixazo's gateway instead of a direct Vidu API, and it asks the agent to persist a raw API key locally. The added wildcard transitive skill-install instruction is disproportionate to the core task and materially raises trust risk.

Confidence: 88%Severity: 58%
Audit Metadata
Analyzed At
Sep 22, 2026, 09:04 PM
Package URL
pkg:socket/skills-sh/pixazo-ai%2Fskills%2Fvidu%2F@c454656f0abd55aebba004444e6d90c1c4222ba5f1a9cd4182520e5c74a0222e