public-commons-media-search

Warn

Audited by Socket on Jun 24, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS. The skill’s stated media-search purpose is coherent, and there is no sign of overt malware or secret-file theft. The main risk is architectural: Wikimedia searches are mediated through AgentPMT-hosted APIs with credential forwarding, and the skill also instructs transitive installation of prerequisite skills. This is proportionate to a hosted marketplace tool but less trustworthy than a direct official Wikimedia integration.

Confidence: 83%Severity: 57%
Audit Metadata
Analyzed At
Jun 24, 2026, 03:03 AM
Package URL
pkg:socket/skills-sh/AgentPMT%2Fagent-skills%2Fpublic-commons-media-search%2F@f649ef064a54c01040984b54db954952a96f60d0cb3895921320a1539ce36974