Storyteller Engine

Warn

Audited by Socket on Mar 15, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS. The stated purpose and capabilities mostly align, and OpenAI usage is expected, but the core package/publisher relationship could not be verified. That makes the install path untrustworthy, especially because the tool would receive an OpenAI API key and structured business data.

Confidence: 82%Severity: 78%
Audit Metadata
Analyzed At
Mar 15, 2026, 03:33 AM
Package URL
pkg:socket/skills-sh/smouj%2Fstoryteller-engine-skill%2Fstoryteller-engine%2F@3ede4475b0c061101f85ca296dba8cbc4dbbaef0