skills/evolinkai/video-generation-skill-for-openclaw/evolink-video/Socket

evolink-video

Warn

Audited by Socket on Mar 31, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: the skill's purpose and capabilities mostly align, and network flows go to documented Evolink domains, but it asks the agent to run an unpinned npm-delivered MCP server and forward the API key into it. This is a moderate supply-chain and credential-forwarding risk, not clear malware.

Confidence: 85%Severity: 56%

Audit Metadata

Analyzed At

Mar 31, 2026, 06:16 AM

Package URL

pkg:socket/skills-sh/evolinkai%2Fvideo-generation-skill-for-openclaw%2Fevolink-video%2F@83723cdfa9d43eb8dd79287651f0e3e291802e90