video-ad-specs
Audited by Socket on Mar 8, 2026
1 alert found:
MalwareThe skill's stated purpose (platform-specific video ad specs and generation workflow) is coherent with a creative tooling objective. However, the install and data-flow footprint is concerning: it downloads unverifiable binaries from non-official sources, uses a direct shell execution pattern, and involves a login step that may expose credentials. These supply-chain and credential-collection patterns, combined with potential external data processing of user prompts/assets, push the overall risk to Suspicious. The footprint is disproportionate to a purely documentation/guidance tool and warrants caution or replacement with a fully auditable, registry-backed installation and clearly scoped data handling.