skills/ratacat/claude-skills/feature-video/Socket

feature-video

Warn

Audited by Socket on Oct 2, 2026

1 alert found:

Security

SecuritySKILL.md

MEDIUM

SecurityMEDIUM

SKILL.md

SUSPICIOUS: the core recording and PR-editing behavior fits the stated purpose, and the agent-browser install path appears official. However, the skill's hard-coded upload to a public third-party R2 bucket is disproportionate and creates a significant exfiltration risk for screenshots/video of potentially private features.

Confidence: 89%Severity: 74%

Audit Metadata

Analyzed At

Oct 2, 2026, 05:09 PM

Package URL

pkg:socket/skills-sh/ratacat%2Fclaude-skills%2Ffeature-video%2F@52f33406e1307669970dc38b1f2c8d7579729e916c02853cbc04eeab4081ec98