to-android-integrate

Warn

Audited by Socket on Sep 10, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS. The visible skill is mostly coherent for Android dependency integration and does not overreach for credentials or hidden actions, but its core behavior depends on an unseen local script that downloads and extracts artifacts from an unverified publisher relationship. That unverifiable acquisition path is disproportionate enough to classify the skill as suspicious rather than benign.

Confidence: 84%Severity: 72%
Audit Metadata
Analyzed At
Sep 10, 2026, 09:37 AM
Package URL
pkg:socket/skills-sh/agent-easy-use%2Fmobile-easy-use%2Fto-android-integrate%2F@f781782ababee5d9577e4fd649db19c4cc4a29954b7240ad439086631d252b66