skills/anygenio/anygen-skills/anygen-deep-research/Socket

anygen-deep-research

Warn

Audited by Socket on Sep 15, 2026

1 alert found:

Security

SecuritySKILL.md

MEDIUM

SecurityMEDIUM

SKILL.md

SUSPICIOUS: The skill’s purpose is coherent, but it relies on an unverified `anygen` CLI, passes API keys to that CLI, and installs another skill transitively. Data flow to AnyGen is expected for server-side research, but the unclear CLI provenance makes the trust boundary disproportionate.

Confidence: 85%Severity: 83%

Audit Metadata

Analyzed At

Sep 15, 2026, 01:07 PM

Package URL

pkg:socket/skills-sh/anygenio%2Fanygen-skills%2Fanygen-deep-research%2F@713c78398c8e9dbb779d674bf695b117fd74062737ab64f0e3568bc60a6abf7e