data-charts-tako

Warn

Audited by Socket on Jul 2, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the skill's core purpose is plausible, but it reads credentials from a local file and forwards both credentials and user data through a Gooseworks proxy instead of calling the target service directly. Same-org Gooseworks documentation reduces the chance of outright malware, but the intermediary data flow and raw credential access make the skill higher-risk than a straightforward official API integration.

Confidence: 100%Severity: 60%
Audit Metadata
Analyzed At
Jul 2, 2026, 06:18 AM
Package URL
pkg:socket/skills-sh/athina-ai%2Fgoose-skills%2Fdata-charts-tako%2F@409223328c5a85bbf19a74b73a26d74ae4907d115c2d6e0f97b9d2040d0417c5
Security Audit — socket — data-charts-tako