maya-scene

Warn

Audited by Socket on Oct 23, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the core purpose and Maya-scene capabilities are aligned, and no credential theft or external exfiltration is shown. Risk comes from relying on a powerful local command execution surface and a bridge distributed from a personal GitHub toolkit with limited release verification, plus unnecessary Bash permission.

Confidence: 86%Severity: 56%
Audit Metadata
Analyzed At
Oct 23, 2026, 07:18 AM
Package URL
pkg:socket/skills-sh/sideshowroberto%2Fvfx-agent-toolkit%2Fmaya-scene%2F@ac9766f90685e331b0e2c993e4a56b40cbb2ea52a46a8142f426995c90100751