skills/everyinc/every-marketplace/feature-video/Socket

feature-video

Warn

Audited by Socket on Mar 28, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: the core workflow is coherent for a PR demo skill and GitHub data flows are proportionate, but it relies on a separate `agent-browser` skill/tool with unverified trust and introduces transitive-install risk plus browser-automation exposure. Not malicious on its face, but higher risk than a self-contained GitHub-only skill.

Confidence: 84%Severity: 63%

Audit Metadata

Analyzed At

Mar 28, 2026, 01:16 AM

Package URL

pkg:socket/skills-sh/EveryInc%2Fevery-marketplace%2Ffeature-video%2F@7e3c965255801f8ebd10a3eb8571223e2622270d