video-ad-specs

Fail

Audited by Socket on Mar 8, 2026

1 alert found:

Malware
MalwareHIGH
SKILL.md

The skill's stated purpose (platform-specific video ad specs and generation workflow) is coherent with a creative tooling objective. However, the install and data-flow footprint is concerning: it downloads unverifiable binaries from non-official sources, uses a direct shell execution pattern, and involves a login step that may expose credentials. These supply-chain and credential-collection patterns, combined with potential external data processing of user prompts/assets, push the overall risk to Suspicious. The footprint is disproportionate to a purely documentation/guidance tool and warrants caution or replacement with a fully auditable, registry-backed installation and clearly scoped data handling.

Confidence: 73%Severity: 68%
Audit Metadata
Analyzed At
Mar 8, 2026, 02:51 AM
Package URL
pkg:socket/skills-sh/1nfsh-s3%2Fskills%2Fvideo-ad-specs%2F@a3e390479e777d354099eec457931a1fec9cbeb0