last30days
Warn
Audited by Socket on Oct 21, 2026
1 alert found:
AnomalyAnomalyvariants/open/SKILL.md
LOWAnomalyLOW
variants/open/SKILL.md
SUSPICIOUS: the skill's overall purpose is coherent, but its data flows are broader than the description suggests. Recent-topic research reasonably needs web/social inputs and local storage, yet several source integrations route queries and credentials through third-party intermediaries instead of official source APIs, especially OpenAI for Reddit, OpenRouter for Perplexity, and Bird for X. No confirmed malware or load-time execution is present, but the multi-provider credential forwarding and indirect routing create medium security risk.
Confidence: 87%Severity: 62%
Audit Metadata