sesion-mental-health-saas

Warn

Audited by Socket on Jul 11, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: the capability set broadly matches a clinic SaaS, but the install trust is inconsistent because a skill published as ara.so directs the agent to clone and execute an unrelated personal GitHub repo. Sensitive clinical, billing, payment, and messaging credentials are extensive yet mostly proportional to the claimed product; the main risk is third-party code execution plus external handling of confidential patient data.

Confidence: 89%Severity: 72%
Audit Metadata
Analyzed At
Jul 11, 2026, 12:26 PM
Package URL
pkg:socket/skills-sh/Aradotso%2Fdevtools-skills%2Fsesion-mental-health-saas%2F@9c18eb8355c992dd5255e29839cce4995e9fbc5b1608794b487f20920dd54504
Security Audit — socket — sesion-mental-health-saas