video-edit

Warn

Audited by Socket on Sep 15, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: The runtime purpose and data flows are mostly coherent for a RunComfy video-edit router, and the RunComfy CLI install/use look official. The main concern is transitive trust: the skill is installed from a third-party GitHub publisher (agentspace-so) via the skills CLI rather than directly from the RunComfy org, so provenance is weaker even though the subsequent API calls appear to stay within RunComfy-owned endpoints.

Confidence: 90%Severity: 56%
Audit Metadata
Analyzed At
Sep 15, 2026, 04:17 AM
Package URL
pkg:socket/skills-sh/runcomfy-com%2Fskills%2Fvideo-edit%2F@5d10803cf6b49f1b1a55e832eeb5181c825bdcd10c9d31ec72031d6b6f0f334c
Security Audit — socket — video-edit