skills/barneyjm/camino-skills/camino-ev-charger/Socket

camino-ev-charger

Warn

Audited by Socket on May 15, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS. The runtime behavior is coherent with an EV charger lookup skill and credentials flow to Camino's official API, but installation trust is weaker than it should be because the skill is installed from an unpinned personal GitHub repo and also promotes bulk companion-skill installation. Main risk is supply-chain and transitive trust, not confirmed malicious behavior.

Confidence: 87%Severity: 61%

Audit Metadata

Analyzed At

May 15, 2026, 11:18 AM

Package URL

pkg:socket/skills-sh/barneyjm%2Fcamino-skills%2Fcamino-ev-charger%2F@f5fa70db9f0112c3a57267b60e77ddbc43c88d13