vidu
Warn
Audited by Socket on Sep 22, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS. The skill's video-generation behavior broadly matches its stated purpose, but the data flow is routed through Pixazo's gateway instead of a direct Vidu API, and it asks the agent to persist a raw API key locally. The added wildcard transitive skill-install instruction is disproportionate to the core task and materially raises trust risk.
Confidence: 88%Severity: 58%
Audit Metadata