showcase-video
Warn
Audited by Socket on Oct 1, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS: the video-editing purpose is coherent, but the skill depends on an unverifiable custom `um` executable suite and likely forwards API credentials through that wrapper. ffmpeg/Pillow usage is normal, yet the unresolved provenance of the core CLI makes the overall skill high risk.
Confidence: 85%Severity: 82%
Audit Metadata