subtitles

Fail

Audited by Socket on Sep 21, 2026

1 alert found:

Malware
MalwareHIGH
references/auth-setup.md

No executable code was supplied, but the document is a credential-collection and credential-persistence workflow. It requests API keys and OTPs, forwards authentication data to an external service, and stores the resulting secret persistently. This is consistent with a potential credential-harvesting or unauthorized account-provisioning pattern and should not be followed without independently verifying the service, authorization, and secure secret-management process.

Confidence: 98%Severity: 86%
Audit Metadata
Analyzed At
Sep 21, 2026, 11:50 AM
Package URL
pkg:socket/skills-sh/zeropointrepo%2Fyoutube-skills%2Fsubtitles%2F@baf8d17f8bbefb738ecb54cd4e7b7a22e6f28ef4095824190fa478347a6abb35