universal-api-glue
Warn
Audited by Socket on Apr 19, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS: the stated purpose is broad integration, but the actual footprint is overpowered and weakly bounded. Arbitrary doc scraping, reverse-engineering, auth generation for any service, and permanent tool addition create high autonomy and trust-chain risk without clear provenance or data-flow constraints.
Confidence: 87%Severity: 82%
Audit Metadata