data-analysis-agent-business-intelligence

Warn

Audited by Socket on May 17, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: the business-intelligence functionality is plausible, but the trust chain is inconsistent. An ara.so-branded skill tells users to install and entrust business data and credentials to a separate personal GitHub project via unpinned raw-script installers, creating high supply-chain risk without clear same-publisher verification.

Confidence: 88%Severity: 78%
Audit Metadata
Analyzed At
May 17, 2026, 03:29 PM
Package URL
pkg:socket/skills-sh/Aradotso%2Fai-agent-skills%2Fdata-analysis-agent-business-intelligence%2F@b1d88f783ef90a666da199d3e71e3250059719a7
Security Audit — socket — data-analysis-agent-business-intelligence