tokyomotion-downloader
Warn
Audited by Socket on Apr 10, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS: The described capability is broadly aligned with the stated purpose, but the skill asks users to install an external browser extension artifact and references OTP/license services without enough transparency to verify permissions, provenance, or data flows. This is not confirmed malware, but it carries medium supply-chain and privacy risk due to opaque extension binaries and undisclosed backend interactions.
Confidence: 73%Severity: 58%
Audit Metadata