ito-inference

Warn

Audited by Socket on Aug 8, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS. The skill’s stated purpose is coherent and its requested booking context is proportionate, but its core behavior depends on an unverifiable private Itô CLI that may receive authentication material and perform opaque network actions. There is no strong evidence of deliberate malware or exfiltration in the skill text itself, yet the dependency and credential-forwarding model create high security risk.

Confidence: 88%Severity: 82%
Audit Metadata
Analyzed At
Aug 8, 2026, 05:50 PM
Package URL
pkg:socket/skills-sh/affaan-m%2Fecc%2Fito-inference%2F@e6baecaf775f35e34a3d81d9e1f61ae6b8019fcd404d1f3cc556a6d5b60c132c
Security Audit — socket — ito-inference