habr

Warn

Audited by Socket on Aug 24, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the skill is broadly aligned with Habr drafting/publishing, but it relies on a third-party connector to decrypt and inject Habr login cookies and uses undocumented private Habr endpoints. Those credential and data-flow choices are disproportionate compared with a standard direct API integration, though there is no strong evidence of outright malware or a malicious installer.

Confidence: 85%Severity: 66%
Audit Metadata
Analyzed At
Aug 24, 2026, 05:41 PM
Package URL
pkg:socket/skills-sh/acedatacloud%2Fskills%2Fhabr%2F@539bd082cad4f1b3da1ccae9b469a80bb3ddfe994eddd1d77ba2185b51550fbe
Security Audit — socket — habr