xvideos-video-downloader
Warn
Audited by Socket on Apr 10, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
The skill’s described capabilities are broadly consistent with its stated purpose: a browser extension that detects and downloads playable XVideos media. The main concern is install trust: users are directed to sideload a proprietary release build from GitHub instead of a browser-store package, which makes the final executable extension less independently verifiable. No clear credential theft, exfiltration, or unrelated capability is evident from the provided text, but the undisclosed sign-in/licensing flow and side-loaded extension model keep this above benign.
Confidence: 81%Severity: 72%
Audit Metadata