remotion-render

Fail

Audited by Socket on Mar 24, 2026

1 alert found:

Malware
MalwareHIGH
SKILL.md

SUSPICIOUS. The skill is mostly coherent with its stated purpose, and the installer appears to be the platform's official same-domain path, which lowers malware concern. However, it still uses a pipe-to-shell installer, sends user code to a remote service, grants broad `infsh` CLI access, and encourages transitive installation of other skills, so the overall security risk is medium rather than benign.

Confidence: 85%Severity: 52%
Audit Metadata
Analyzed At
Mar 24, 2026, 09:16 AM
Package URL
pkg:socket/skills-sh/inference-sh-8%2Fskills%2Fremotion-render%2F@b5ab6c4d0d18641924436aa75648a6de76c6d259