gumlet-video-asset-upload

Warn

Audited by Socket on Apr 29, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

The skill’s purpose and data flow are coherent for video upload, and the apparent network path aligns with Gumlet’s official API model. However, it relies on an unverified external `gumlet` CLI that receives authentication and file data without a documented, verifiable install source in the provided evidence, so this should be treated as suspicious/high-risk rather than benign.

Confidence: 84%Severity: 82%
Audit Metadata
Analyzed At
Apr 29, 2026, 11:14 AM
Package URL
pkg:socket/skills-sh/gumlet%2Fcli%2Fgumlet-video-asset-upload%2F@dae0e3763c21b49f1ae0eed7aa2db0f9495ce811