data-charts-tako
Warn
Audited by Socket on Jul 2, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS: the skill's core purpose is plausible, but it reads credentials from a local file and forwards both credentials and user data through a Gooseworks proxy instead of calling the target service directly. Same-org Gooseworks documentation reduces the chance of outright malware, but the intermediary data flow and raw credential access make the skill higher-risk than a straightforward official API integration.
Confidence: 100%Severity: 60%
Audit Metadata