skills/inference-sh/agent-skills/google-veo/Socket

google-veo

Warn

Audited by Socket on Apr 14, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: the skill's basic function is coherent, but it relies on a third-party platform/CLI that intermediates both authentication and Google Veo requests, and it encourages transitive skill installation. Same-org evidence for inference.sh lowers pure supply-chain concern, yet the proxy-style data flow and credential forwarding make the overall risk medium.

Confidence: 82%Severity: 66%

Audit Metadata

Analyzed At

Apr 14, 2026, 09:11 AM

Package URL

pkg:socket/skills-sh/inference-sh%2Fagent-skills%2Fgoogle-veo%2F@7a7e216e265f8ad1c14ae26171730b85fb7d9dd0