remotion-video-factory
Warn
Audited by Socket on Sep 14, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS. The core video-generation workflow is coherent and the documented `npm install` is benign, but the optional clone-voice mode introduces a meaningful trust and privacy gap: it routes reference voice audio/text to an unspecified third-party service with no provenance or endpoint details. Absent that clone mode, this would be largely benign low-risk tooling.
Confidence: 88%Severity: 56%
Audit Metadata