skills/baekenough/oh-my-customcode/hada-scout/Socket

hada-scout

Warn

Audited by Socket on May 15, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS. The skill is mostly coherent for feed monitoring and GitHub issue triage, and its GitHub credential use appears proportionate. Main concerns are the use of a third-party FeedBurner URL instead of Hada's first-party RSS endpoint, autonomous issue creation, and transitive risk from invoking /scout on untrusted external content.

Confidence: 85%Severity: 58%

Audit Metadata

Analyzed At

May 15, 2026, 06:20 PM

Package URL

pkg:socket/skills-sh/baekenough%2Foh-my-customcode%2Fhada-scout%2F@d3ef2221cd412bf9c5e74f3a6dab248dcc9f5da9