jev-diagnostic-advice

Warn

Audited by Socket on Oct 2, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: the skill's stated purpose is coherent and its consent/disclosure language is largely protective, but it relies on an unverified external MCP server and allows routing data to a non-official 'compatible endpoint.' That combination makes the footprint higher risk than a normal documentation-only advisory skill, mainly due to install/provenance and remote data-flow uncertainty rather than confirmed malicious intent.

Confidence: 84%Severity: 79%
Audit Metadata
Analyzed At
Oct 2, 2026, 03:58 PM
Package URL
pkg:socket/skills-sh/automateyournetwork%2Fnetclaw%2Fjev-diagnostic-advice%2F@c1e8f3959b64238d06ca47c97d4436c620464eea5ed6a161984a59d36139ce48