storyboard-creation

Fail

Audited by Socket on Mar 4, 2026

1 alert found:

Malware
MalwareHIGH
SKILL.md

The skill paper describes a plausible workflow for AI-assisted storyboard generation but relies on a download-execute installer from remote domains without explicit build-time integrity verification in the fragment. This elevates supply-chain risk and could enable tampering if the external binaries are compromised. For safer deployment, require pinned installers, signed packages, reproducible builds, and explicit provenance for transitive tools.

Confidence: 95%Severity: 90%
Audit Metadata
Analyzed At
Mar 4, 2026, 12:15 PM
Package URL
pkg:socket/skills-sh/tul-sh%2Fskills%2Fstoryboard-creation%2F@199a5bd37dd82eb1cb2dadc4f081d42a4bec6745