xvideos-video-downloader

Warn

Audited by Socket on Apr 10, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

The skill’s described capabilities are broadly consistent with its stated purpose: a browser extension that detects and downloads playable XVideos media. The main concern is install trust: users are directed to sideload a proprietary release build from GitHub instead of a browser-store package, which makes the final executable extension less independently verifiable. No clear credential theft, exfiltration, or unrelated capability is evident from the provided text, but the undisclosed sign-in/licensing flow and side-loaded extension model keep this above benign.

Confidence: 81%Severity: 72%
Audit Metadata
Analyzed At
Apr 10, 2026, 10:15 PM
Package URL
pkg:socket/skills-sh/serpdownloaders%2Fskills%2Fxvideos-video-downloader%2F@16fd2d3cfc58303ac3c73908cba2cf4d2ddd49ed