hyperlocal-weather-precip
Warn
Audited by Socket on Jul 2, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS leaning benign: the weather functionality is coherent, and the Gooseworks install/auth flow appears officially documented, but the skill reads raw local credentials and routes all API calls through Gooseworks proxy endpoints instead of the underlying weather service. The main risk is intermediary credential/data handling and transitive trust in the Gooseworks platform, not clear malicious intent.
Confidence: 86%Severity: 58%
Audit Metadata