research

Warn

Audited by Socket on May 3, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: The overall capability matches a research skill, but the documentation is internally inconsistent about Z.AI MCP being free/no-key and understates that core searches/content retrieval are routed through third-party remote MCP services. Main risks are third-party data exposure and indirect prompt injection from untrusted web content, not confirmed malware.

Confidence: 87%Severity: 61%
Audit Metadata
Analyzed At
May 3, 2026, 11:07 AM
Package URL
pkg:socket/skills-sh/alfredolopez80%2Fmulti-agent-ralph-loop%2Fresearch%2F@5171fd09082994e5db5c83c0ceb4dfdcabd12d6a
Security Audit — socket — research