gumlet-video-asset
Warn
Audited by Socket on Apr 29, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS. The asset-management commands fit the stated purpose and data appears to flow to Gumlet, not an unrelated proxy. However, the skill requires an external Gumlet CLI whose installation and release provenance are not documented here; under the skill risk model, that unresolved binary trust materially raises security risk. The delete capability is also a meaningful destructive action that should require explicit user approval.
Confidence: 84%Severity: 78%
Audit Metadata