skills/athina-ai/goose-skills/verify-email/Socket

verify-email

Warn

Audited by Socket on Jul 2, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: The skill’s purpose is plausible, and the Gooseworks publisher appears legitimate, but the data flow is not direct. It extracts a local API key and routes requests through a Gooseworks proxy instead of Hunter/Tomba official endpoints, creating unnecessary intermediary trust and moderate credential/data exposure risk.

Confidence: 87%Severity: 69%

Audit Metadata

Analyzed At

Jul 2, 2026, 06:17 AM

Package URL

pkg:socket/skills-sh/athina-ai%2Fgoose-skills%2Fverify-email%2F@08acacd7ee70a5a636dfb6b6d7249050d120b0b30af1b560d3462581713e6a0c