subtitle-extractslator
Warn
Audited by Socket on Oct 9, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS: the subtitle-processing purpose is coherent, but the install/runtime model is not proportionate to a simple skill. It presents as binary-free while requiring externally restored CLI/runtime binaries from personal GitHub package indexes, creating a meaningful supply-chain trust risk without direct evidence of malicious exfiltration.
Confidence: 81%Severity: 72%
Audit Metadata