skills/barneyjm/camino-skills/camino-journey/Socket

camino-journey

Warn

Audited by Socket on May 15, 2026

1 alert found:

Security

SecuritySKILL.md

MEDIUM

SecurityMEDIUM

SKILL.md

SUSPICIOUS. The skill's API use and credential scope are coherent with journey planning, and data flows go to the official Camino domain. However, the recommended installation path relies on an unpinned third-party GitHub repo from a personal account and encourages bulk companion-skill installation, creating a disproportionate transitive trust and supply-chain risk.

Confidence: 90%Severity: 74%

Audit Metadata

Analyzed At

May 15, 2026, 11:18 AM

Package URL

pkg:socket/skills-sh/barneyjm%2Fcamino-skills%2Fcamino-journey%2F@c94fd58f37e3492f02f6cbfa577d3b81b93a7a1e