hyperlocal-weather-precip

Warn

Audited by Socket on Jul 2, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS leaning benign: the weather functionality is coherent, and the Gooseworks install/auth flow appears officially documented, but the skill reads raw local credentials and routes all API calls through Gooseworks proxy endpoints instead of the underlying weather service. The main risk is intermediary credential/data handling and transitive trust in the Gooseworks platform, not clear malicious intent.

Confidence: 86%Severity: 58%
Audit Metadata
Analyzed At
Jul 2, 2026, 06:17 AM
Package URL
pkg:socket/skills-sh/athina-ai%2Fgoose-skills%2Fhyperlocal-weather-precip%2F@f1959930279b993bb892f568a43a1bd71a57d793ecd1857642282fe9c7056731
Security Audit — socket — hyperlocal-weather-precip