message-push

Warn

Audited by Socket on May 11, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: The skill’s purpose aligns with messaging, but it relies on an unspecified localhost gateway that intermediates delivery to multiple IM platforms. The capability is coherent, yet the undocumented gateway provenance and indirect data flow create medium risk, especially because it enables proactive outbound messaging with real-world effects.

Confidence: 84%Severity: 58%
Audit Metadata
Analyzed At
May 11, 2026, 12:11 PM
Package URL
pkg:socket/skills-sh/0xranx%2Fgolembot%2Fmessage-push%2F@4321d792ee3cce0f2b21f7f8080bf027f6d7ec02