claude-gif-convert
Warn
Audited by Socket on Apr 9, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS: The core local GIF-conversion capabilities are coherent and mostly benign, but the skill expands into AI image generation and recommends an unofficial third-party 'banana MCP' path for Gemini, creating disproportionate credential/data-flow risk. Local FFmpeg/Playwright usage is expected for the stated purpose, but the third-party intermediary and undeclared local helper toolchain raise the overall security posture to medium-high risk.
Confidence: 84%Severity: 69%
Audit Metadata