camera-provider-eufy

Fail

Audited by Socket on Mar 10, 2026

1 alert found:

Obfuscated File
Obfuscated FileHIGH
SKILL.md

The skill's stated purpose (local RTSP streaming and event clip retrieval from Eufy cameras) aligns with its capabilities. However, credential handling (username/password) and the lack of explicit security controls for data in transit/rest introduce moderate risk. The install pathway via requirements.txt without visible integrity verification is a potential supply-chain concern if dependencies are not vetted. Overall, the footprint is plausibly benign for a home-network camera integration but is moderately risky due to credential exposure and streaming data handling. Recommend adding secrets management, explicit TLS usage, and pinned/checksummed dependencies before deployment.

Confidence: 98%
Audit Metadata
Analyzed At
Mar 10, 2026, 12:50 AM
Package URL
pkg:socket/skills-sh/SharpAI%2FDeepCamera%2Fcamera-provider-eufy%2F@af0d4a52208168fb403de067152723efd7f2993b