compare-flights

Warn

Audited by Socket on May 1, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: The skill’s travel-comparison purpose aligns with its stated capabilities, and referenced endpoints are mostly official. The main risk is transitive trust: it orchestrates many other skills, uses web search on untrusted content, and may involve live portal credentials through unseen companion skills. No direct malware, exfiltration endpoint, or malicious install chain appears in this file, but the orchestration footprint is broad enough to merit caution.

Confidence: 84%Severity: 52%
Audit Metadata
Analyzed At
May 1, 2026, 11:27 AM
Package URL
pkg:socket/skills-sh/borski%2Ftravel-hacking-toolkit%2Fcompare-flights%2F@6376744d25c8e6ba069be6e9f0d9087638a72a2d
Security Audit — socket — compare-flights