douyin-sentiment-dashboard
Warn
Audited by Socket on Apr 30, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS: the skill's purpose and capabilities broadly align, but it is a third-party hosted workflow that sends user-provided Douyin links and an API key to `ai-skills.ai`, and its install flow includes a transitive `skills add` step. This looks more like a SaaS proxy skill than local analysis; risk is moderate due to remote data handling and incomplete install-path verification, not because of confirmed malware.
Confidence: 84%Severity: 56%
Audit Metadata