supadata
Audited by Socket on Mar 3, 2026
1 alert found:
SecurityThis skill is an API client/SDK for the Supadata transcription and video-extraction service. The documented capabilities align with the API endpoints and the single required credential (SUPADATA_API_KEY). There are no obvious malicious code patterns, credential-harvesting tricks, or download-and-execute supply-chain signals in the provided documentation. The primary security consideration is that user-supplied video content, transcripts, and the API key will be sent to the remote service (api.supadata.ai); this is expected for a hosted API but requires trust in the service's handling of data. Overall, I find no evidence of malicious behavior in the provided skill description, but standard caution about third-party API trust and reviewing the actual pip package contents before install is advised.