skills/barneyjm/camino-skills/travel-planner/Socket

travel-planner

Warn

Audited by Socket on May 12, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: The functional scope matches a travel-planning skill and data flows go to Camino's official API, but install trust is weakened by use of a personal GitHub repo and companion-skill installation guidance that broadens trust transitively. This looks more like a legitimate but medium-risk third-party skill distribution setup than malware.

Confidence: 87%Severity: 56%

Audit Metadata

Analyzed At

May 12, 2026, 11:15 PM

Package URL

pkg:socket/skills-sh/barneyjm%2Fcamino-skills%2Ftravel-planner%2F@fa3081f70af649dae65cf2ff8e56f89c041f7bf1