skills/inference-sh-3/skills/explainer-video-guide/Socket

explainer-video-guide

Fail

Audited by Socket on Mar 25, 2026

1 alert found:

Malware

MalwareSKILL.md

HIGH

MalwareHIGH

SKILL.md

SUSPICIOUS: The skill's core video-production behavior is coherent, and the installer appears to be the official inference.sh path, so this is not confirmed malware. Risk comes from the pipe-to-shell install, handing auth/secrets to an external CLI, broad Bash permission, and transitive installation of other skills.

Confidence: 84%Severity: 68%

Audit Metadata

Analyzed At

Mar 25, 2026, 01:01 AM

Package URL

pkg:socket/skills-sh/inference-sh-3%2Fskills%2Fexplainer-video-guide%2F@98b66bbe938ee951af15b470737ef47b1fdc37bb