video-transcription

Warn

Audited by Socket on May 13, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS. The core behavior matches a video transcription skill, and there is no evidence of malware, exploit code, or unsafe installer chains. However, the skill hides the actual provider endpoint and likely routes media and auth to a third-party hosted API rather than a clearly disclosed official service, creating medium data-flow and transparency risk.

Confidence: 82%Severity: 54%
Audit Metadata
Analyzed At
May 13, 2026, 07:52 PM
Package URL
pkg:socket/skills-sh/PostPlusAI%2Fpostplus-skills%2Fvideo-transcription%2F@070b907357c821b42ba113558a96a01f365c16aa