pocket-recordings-transcripts
Warn
Audited by Socket on Aug 1, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS: the skill’s capabilities match its stated Pocket-transcript purpose, but it routes sensitive audio/transcript data through AgentPMT-hosted infrastructure instead of a clearly official Pocket API and asks the agent to install additional setup skills. This is a coherent third-party integration, not confirmed malware, but it has meaningful trust, privacy, and transitive-install risk.
Confidence: 86%Severity: 62%
Audit Metadata