tutor-general

Fail

Audited by Socket on Feb 27, 2026

1 alert found:

Obfuscated File
Obfuscated FileHIGH
SKILL.md

The provided SKILL.md documents a legitimate workflow for producing Motion Canvas narrated videos. There is no explicit malicious code or indicators of credential theft in the reviewed file. The primary security concern is supply-chain risk: executing unreviewed Python scripts and installing/running Node dependencies (including edge-tts) can run arbitrary code or contact external services. Before running, review the referenced scripts and lock/audit dependencies; treat execution in an isolated environment if processing sensitive data.

Confidence: 98%
Audit Metadata
Analyzed At
Feb 27, 2026, 07:36 PM
Package URL
pkg:socket/skills-sh/wangyendt%2Fwayne-skills%2Ftutor-general%2F@240d80d5a6db767668a185bbeffe3ab121268c78