skills/bighardperson/computer-science-skills-collection/tencent-survey/Socket

tencent-survey

Warn

Audited by Socket on Jul 31, 2026

1 alert found:

Security

SecuritySKILL.md

MEDIUM

SecurityMEDIUM

SKILL.md

SUSPICIOUS. The skill’s stated capabilities match Tencent Survey operations, but trust is weakened by an opaque local setup.sh, third-party mcporter mediation, and remote update instructions. Credential scope is mostly proportionate, yet the exact token/data path cannot be fully verified from the supplied content, so overall risk is medium-high rather than benign.

Confidence: 84%Severity: 72%

Audit Metadata

Analyzed At

Jul 31, 2026, 03:25 PM

Package URL

pkg:socket/skills-sh/bighardperson%2Fcomputer-science-skills-collection%2Ftencent-survey%2F@813e965990eaca71bde12214dd3f87ac8ef176da34062a6d61d4e63424bffae9