last30days

Warn

Audited by Socket on Oct 21, 2026

1 alert found:

Anomaly
AnomalyLOW
variants/open/SKILL.md

SUSPICIOUS: the skill's overall purpose is coherent, but its data flows are broader than the description suggests. Recent-topic research reasonably needs web/social inputs and local storage, yet several source integrations route queries and credentials through third-party intermediaries instead of official source APIs, especially OpenAI for Reddit, OpenRouter for Perplexity, and Bird for X. No confirmed malware or load-time execution is present, but the multi-provider credential forwarding and indirect routing create medium security risk.

Confidence: 87%Severity: 62%
Audit Metadata
Analyzed At
Oct 21, 2026, 08:15 PM
Package URL
pkg:socket/skills-sh/aaaaqwq%2Fagi-super-team%2Flast30days%2F@2b417f606338cc62db7fbfbdbf9ccf7ed51d54e8dd79fb77b83926d4e116d53e