data-analysis-agent-business-intelligence
Warn
Audited by Socket on May 17, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS: the business-intelligence functionality is plausible, but the trust chain is inconsistent. An ara.so-branded skill tells users to install and entrust business data and credentials to a separate personal GitHub project via unpinned raw-script installers, creating high supply-chain risk without clear same-publisher verification.
Confidence: 88%Severity: 78%
Audit Metadata