subtitle-extractslator
Warn
Audited by Socket on Mar 31, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
The stated subtitle-processing purpose is mostly coherent, and OpenSubtitles usage fits that purpose. The main issue is install and trust: the skill requires execution of a GitHub-release binary that is the core runtime and appears to receive authentication and provider credentials, which triggers high supply-chain and credential-forwarding risk. Overall classification: SUSPICIOUS due to unverifiable binary trust and opaque external-provider routing, not confirmed malware.
Confidence: 83%Severity: 84%
Audit Metadata