skills/whytryharder/skills/p-video/Socket

p-video

Warn

Audited by Socket on Aug 6, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: the stated purpose is coherent with video generation via inference.sh, but the skill increases trust surface by requiring transitive skill installation and a remote-installed external CLI. Data flow appears aligned to inference.sh rather than an obvious exfiltration host, so this is not confirmed malware, but it carries meaningful supply-chain and credential-forwarding risk.

Confidence: 83%Severity: 64%

Audit Metadata

Analyzed At

Aug 6, 2026, 05:03 AM

Package URL

pkg:socket/skills-sh/whytryharder%2Fskills%2Fp-video%2F@5308415a93ad06e361a96371dba72e4f7544850835a250c52cdcb7cfb52e817b