douyin-sentiment-dashboard

Warn

Audited by Socket on Apr 30, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the skill's purpose and capabilities broadly align, but it is a third-party hosted workflow that sends user-provided Douyin links and an API key to `ai-skills.ai`, and its install flow includes a transitive `skills add` step. This looks more like a SaaS proxy skill than local analysis; risk is moderate due to remote data handling and incomplete install-path verification, not because of confirmed malware.

Confidence: 84%Severity: 56%
Audit Metadata
Analyzed At
Apr 30, 2026, 09:00 AM
Package URL
pkg:socket/skills-sh/allinherog-star%2Fai-skills%2Fdouyin-sentiment-dashboard%2F@921babb558b7e24477630a7c19a9db5c3c54d769