news-briefing

Warn

Audited by Socket on Jun 13, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: The skill’s news-briefing behavior is broadly aligned with its purpose, but the declared 'official Bitget' identity is weakened by a third-party MCP endpoint reference and explicit suppression of infrastructure details. No clear credential theft or malicious payload is shown, yet backend data-flow transparency is insufficient.

Confidence: 100%Severity: 60%
Audit Metadata
Analyzed At
Jun 13, 2026, 09:08 AM
Package URL
pkg:socket/skills-sh/bitget-ai%2Fagent_hub%2Fnews-briefing%2F@ad58fa55016532ae32d13ee00cc6e4864f605b9e57018816eca4841aedca482e
Security Audit — socket — news-briefing