tm-search

Warn

Audited by Socket on May 17, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS. The core purpose is legitimate and official USPTO endpoints are used for serial-number lookups, but the skill also recommends bypass-oriented browser automation and a third-party RapidAPI wrapper for keyword search. Those additions are not strictly necessary to the stated purpose and introduce intermediary data flow and credential-forwarding risk disproportionate to a simple trademark search helper.

Confidence: 89%Severity: 56%
Audit Metadata
Analyzed At
May 17, 2026, 05:48 AM
Package URL
pkg:socket/skills-sh/biggora%2Fclaude-plugins-registry%2Ftm-search%2F@d223c04c17d1003f06648bcfca9a39cde8f0824f
Security Audit — socket — tm-search