universal-api-glue

Warn

Audited by Socket on Apr 19, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: the stated purpose is broad integration, but the actual footprint is overpowered and weakly bounded. Arbitrary doc scraping, reverse-engineering, auth generation for any service, and permanent tool addition create high autonomy and trust-chain risk without clear provenance or data-flow constraints.

Confidence: 87%Severity: 82%
Audit Metadata
Analyzed At
Apr 19, 2026, 05:41 AM
Package URL
pkg:socket/skills-sh/adryanmoldokkr32-pixel%2Fbionicbot-giant-sovereign-skills%2Funiversal-api-glue%2F@6cb3805fe47353aa7cfccf13098109352b89c9f8
Security Audit — socket — universal-api-glue