video-t2i
Warn
Audited by Socket on May 12, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS: the skill’s purpose is coherent, but it depends on executing a third-party PyPI CLI whose publisher/source relationship is not strongly verifiable from the provided evidence. Risk is mainly supply-chain and possible credential forwarding opacity, not confirmed malicious behavior.
Confidence: 100%Severity: 60%
Audit Metadata