autoshorts

Warn

Audited by Socket on Aug 13, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: the overall workflow matches a clip-generation/posting skill, but its footprint is high-risk because it handles API keys, uploads video content to external AI/services, and can schedule public posts through a third-party intermediary. The main concerns are trust expansion to Upload-Post, secret persistence to .env, and autonomous real-world posting capability rather than confirmed malware.

Confidence: 82%Severity: 78%
Audit Metadata
Analyzed At
Aug 13, 2026, 05:28 PM
Package URL
pkg:socket/skills-sh/upload-post%2Fskill-autoshorts%2Fautoshorts%2F@e902b2a8d9dcd0ee98e776b5e0455c6c1f30618a
Security Audit — socket — autoshorts