sora-watermark-remover
Warn
Audited by Socket on Mar 23, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS: the skill's purpose is narrowly framed as Sora watermark removal, but its actual footprint is an opaque generated wrapper that sends user data and an AI Skills API key to a third-party backend (`ai-skills.ai`) rather than an official Sora/OpenAI endpoint. No confirmed malware or hostile installer is present, but the purpose-to-backend mismatch and credential/data forwarding make it medium risk.
Confidence: 82%Severity: 56%
Audit Metadata