skills/barneyjm/camino-skills/camino-context/Socket

camino-context

Warn

Audited by Socket on May 15, 2026

1 alert found:

Security

SecuritySKILL.md

MEDIUM

SecurityMEDIUM

SKILL.md

SUSPICIOUS: the functional behavior and credential flow are mostly coherent with a location-context skill, but the installation trust chain is inconsistent. The skill routes data to Camino's official API, yet instructs installation from a personal GitHub repo and encourages bulk installation of many companion skills, creating a transitive trust risk not clearly tied to an official Camino publisher.

Confidence: 89%Severity: 72%

Audit Metadata

Analyzed At

May 15, 2026, 11:18 AM

Package URL

pkg:socket/skills-sh/barneyjm%2Fcamino-skills%2Fcamino-context%2F@63b9d128d1850e0d53714304102f8e16e25c369d