gumlet-video-asset-upload
Warn
Audited by Socket on Apr 29, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
The skill’s purpose and data flow are coherent for video upload, and the apparent network path aligns with Gumlet’s official API model. However, it relies on an unverified external `gumlet` CLI that receives authentication and file data without a documented, verifiable install source in the provided evidence, so this should be treated as suspicious/high-risk rather than benign.
Confidence: 84%Severity: 82%
Audit Metadata