news-digest-video-agent

Warn

Audited by Socket on Apr 14, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: the skill’s purpose is coherent, and its main API/data flow to VideoDB is proportionate, but it materially increases risk by installing other skills, using unpinned remote install methods, and autonomously consuming untrusted web content with write/exec capabilities. This looks more like a risky but plausibly legitimate agent workflow than confirmed malware.

Confidence: 86%Severity: 72%
Audit Metadata
Analyzed At
Apr 14, 2026, 03:16 PM
Package URL
pkg:socket/skills-sh/video-db%2Fagentic-streams%2Fnews-digest-video-agent%2F@52702623499cdcdac93674caf430b6b71398abcc
Security Audit — socket — news-digest-video-agent