pocket-recordings-transcripts

Warn

Audited by Socket on Aug 1, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the skill’s capabilities match its stated Pocket-transcript purpose, but it routes sensitive audio/transcript data through AgentPMT-hosted infrastructure instead of a clearly official Pocket API and asks the agent to install additional setup skills. This is a coherent third-party integration, not confirmed malware, but it has meaningful trust, privacy, and transitive-install risk.

Confidence: 86%Severity: 62%
Audit Metadata
Analyzed At
Aug 1, 2026, 08:51 PM
Package URL
pkg:socket/skills-sh/AgentPMT%2Fagent-skills%2Fpocket-recordings-transcripts%2F@7a1ea4f899b0fb85c2b6cf8ff42b9719492bde411f379bf35be8b2df4490115a