skills/tjxj/z-skills/z-video-downloader/Socket

z-video-downloader

Warn

Audited by Socket on Jul 28, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: the core downloader behavior matches the stated purpose, but trust is weakened by unverifiable local binary/script provenance, forwarding cookies to a CLI, and a third-party Invidious fallback that diverts traffic from official platform endpoints. This looks more like a medium-risk, loosely controlled downloader skill than confirmed malware.

Confidence: 86%Severity: 60%

Audit Metadata

Analyzed At

Jul 28, 2026, 11:39 AM

Package URL

pkg:socket/skills-sh/tjxj%2Fz-skills%2Fz-video-downloader%2F@b34b44c015517f95a58bf81e2749bc625d912b7855dad90a37a7957c176a0038