skills/ai-answer/ask-samin-skill/Ask-Samin/Socket

Ask-Samin

Warn

Audited by Socket on Oct 25, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: the stated purpose is coherent, but the skill’s actual footprint relies on an unverifiable third-party remote MCP on vercel.app and includes transitive skill installation. There is no clear credential harvesting, yet the install trust and remote content-routing model are broader and riskier than a simple reference skill should require.

Confidence: 85%Severity: 68%

Audit Metadata

Analyzed At

Oct 25, 2026, 01:21 AM

Package URL

pkg:socket/skills-sh/ai-answer%2Fask-samin-skill%2Fask-samin%2F@4f9360453494b4e3453c4895476755558899c44074e2ae692c8e07505b9b3481