tellatv-downloader

Warn

Audited by Socket on Apr 10, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS. The stated downloader behavior is broadly consistent with the product description, but the install artifact is a proprietary, unverifiable browser extension distributed via GitHub Releases rather than a transparent source-available or store-verified channel. No clear credential theft or exfiltration is shown, yet the combination of manual extension install, page-level media access, and opaque release assets makes the overall security risk high.

Confidence: 80%Severity: 74%
Audit Metadata
Analyzed At
Apr 10, 2026, 10:15 PM
Package URL
pkg:socket/skills-sh/serpdownloaders%2Fskills%2Ftellatv-downloader%2F@14d184f1e0c1608f8db08d43a7f38a0d546523f2