camino-query

Warn

Audited by Socket on May 15, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: The runtime behavior and data flow are mostly coherent with a Camino place-search skill, and API traffic appears to go to the official Camino endpoint. However, the installation provenance is weak because the skill is distributed from a personal GitHub repo and through third-party skill installers, and it promotes transitive installation of many related skills. Main concern is supply-chain trust, not confirmed malicious behavior.

Confidence: 89%Severity: 72%
Audit Metadata
Analyzed At
May 15, 2026, 11:18 AM
Package URL
pkg:socket/skills-sh/barneyjm%2Fcamino-skills%2Fcamino-query%2F@fc201551aabcc98a0e72aa1f0c60efaadb7fa73b
Security Audit — socket — camino-query