subtitle-extractslator

Warn

Audited by Socket on Oct 9, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: the subtitle-processing purpose is coherent, but the install/runtime model is not proportionate to a simple skill. It presents as binary-free while requiring externally restored CLI/runtime binaries from personal GitHub package indexes, creating a meaningful supply-chain trust risk without direct evidence of malicious exfiltration.

Confidence: 81%Severity: 72%
Audit Metadata
Analyzed At
Oct 9, 2026, 05:56 AM
Package URL
pkg:socket/skills-sh/waynebaby%2Fsubtitleextractslator%2Fsubtitle-extractslator%2F@f2ebdabbf470186c4927dec7a1e78f6a3c103925d9392630fb88f33f768479b0