byted-kickart-viral-replicator

Warn

Audited by Socket on Oct 8, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: 目的与能力基本匹配,是一个 KickArt 视频生成工作流技能;但核心流程依赖经 `npm exec` 临时下载执行的外部 CLI,并将 OAuth 与任务提交都交给该黑盒包处理。来源表面上接近官方生态,但对精确包/命令缺少强一手官方文档验证,因此供应链与凭证转交风险偏高。

Confidence: 87%Severity: 78%
Audit Metadata
Analyzed At
Oct 8, 2026, 09:14 AM
Package URL
pkg:socket/skills-sh/volcengine%2Fbyted-kickart-skills%2Fbyted-kickart-viral-replicator%2F@a743b3f162966142eb6f5f9f4ddcefa1cc714b67e59368848763de54d2d58cf6