supadata

Warn

Audited by Socket on Mar 3, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

This skill is an API client/SDK for the Supadata transcription and video-extraction service. The documented capabilities align with the API endpoints and the single required credential (SUPADATA_API_KEY). There are no obvious malicious code patterns, credential-harvesting tricks, or download-and-execute supply-chain signals in the provided documentation. The primary security consideration is that user-supplied video content, transcripts, and the API key will be sent to the remote service (api.supadata.ai); this is expected for a hosted API but requires trust in the service's handling of data. Overall, I find no evidence of malicious behavior in the provided skill description, but standard caution about third-party API trust and reviewing the actual pip package contents before install is advised.

Confidence: 80%Severity: 75%
Audit Metadata
Analyzed At
Mar 3, 2026, 02:55 PM
Package URL
pkg:socket/skills-sh/Michailbul%2Flaniameda-skills%2Fsupadata%2F@db95307e905126d83a32d26f53fa6bf0177622d8