volcengine-avatar
Warn
Audited by Socket on Oct 14, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS: The skill is broadly coherent for avatar video generation, and the Refly CLI appears same-org and officially documented. However, the stated Volcengine purpose is implemented through Refly-hosted workflows, so user files and prompts flow to Refly rather than directly to a visible Volcengine API, and the skill also auto-downloads/opens remote outputs and inherits behavior from another skill file.
Confidence: 85%Severity: 56%
Audit Metadata