skills/bear2u/claude-plugins/web-search/Socket

web-search

Warn

Audited by Socket on Aug 24, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS. The stated purpose is coherent for a web search skill, and no credential harvesting is evident, but trust is weakened by reliance on an unverified local cached script and a third-party ddgs package that is not official DuckDuckGo software. Risk is mainly supply-chain and provenance ambiguity, not confirmed malware.

Confidence: 87%Severity: 58%

Audit Metadata

Analyzed At

Aug 24, 2026, 12:53 PM

Package URL

pkg:socket/skills-sh/bear2u%2Fclaude-plugins%2Fweb-search%2F@746a0a60868470cc8c6643dc58d952be64b4ce10ebe6b5c61c0df9f1c2fbd7a2