volcengine-avatar

Warn

Audited by Socket on Oct 14, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: The skill is broadly coherent for avatar video generation, and the Refly CLI appears same-org and officially documented. However, the stated Volcengine purpose is implemented through Refly-hosted workflows, so user files and prompts flow to Refly rather than directly to a visible Volcengine API, and the skill also auto-downloads/opens remote outputs and inherits behavior from another skill file.

Confidence: 85%Severity: 56%
Audit Metadata
Analyzed At
Oct 14, 2026, 03:05 AM
Package URL
pkg:socket/skills-sh/refly-ai%2Frefly-skills%2Fvolcengine-avatar%2F@95e259e0f30a087e5f5d28866796c08764c2ce09f23ad8f1dd3e825bc6f077ef