skills/101-skills/skills/web-search/Socket

web-search

Warn

Audited by Socket on Jul 7, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: the stated purpose matches web research, but the implementation depends on inference.sh as an intermediary for Tavily/Exa/OpenRouter operations instead of direct official APIs, and it requires transitive skill installation. This is not confirmed malware, but it carries medium risk from third-party data routing, credential forwarding potential, and supply-chain trust expansion.

Confidence: 82%Severity: 64%

Audit Metadata

Analyzed At

Jul 7, 2026, 11:42 PM

Package URL

pkg:socket/skills-sh/101-skills%2Fskills%2Fweb-search%2F@7d064e7cf327ecb798093cd068723dc6ac738450c5cb0251246a67a98ac0369c