sora-watermark-remover

Warn

Audited by Socket on Mar 23, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the skill's purpose is narrowly framed as Sora watermark removal, but its actual footprint is an opaque generated wrapper that sends user data and an AI Skills API key to a third-party backend (`ai-skills.ai`) rather than an official Sora/OpenAI endpoint. No confirmed malware or hostile installer is present, but the purpose-to-backend mismatch and credential/data forwarding make it medium risk.

Confidence: 82%Severity: 56%
Audit Metadata
Analyzed At
Mar 23, 2026, 04:06 PM
Package URL
pkg:socket/skills-sh/allinherog-star%2Fai-skills%2Fsora-watermark-remover%2F@11a132fb0f8d1aad674ce04077fec7ff838b95d1