skills/the-focus-ai/standards/nano-banana-videogen/Socket

nano-banana-videogen

Warn

Audited by Socket on Jul 29, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: the skill's purpose is coherent, but it relies on a third-party CLI that receives a Google API key instead of using Google's official SDK or documented direct API flow. This is not confirmed malware, but it creates medium supply-chain and credential-forwarding risk.

Confidence: 84%Severity: 56%

Audit Metadata

Analyzed At

Jul 29, 2026, 08:08 AM

Package URL

pkg:socket/skills-sh/The-Focus-AI%2Fstandards%2Fnano-banana-videogen%2F@21ae63627170d82e9464a7d16a0b274a5909c1d30e1ff22345d68f9ecb68edf8