gardening

Warn

Audited by Socket on Aug 1, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS. The core reservation-audit purpose is legitimate, and there is no clear malware or malicious installer behavior, but the skill's actual footprint is broader than its stated file-based scope. The mandatory AwardWallet-first step and wide distribution of itinerary data to many third-party services create medium privacy and security risk disproportionate to a simple reservations-file audit.

Confidence: 83%Severity: 57%
Audit Metadata
Analyzed At
Aug 1, 2026, 10:14 PM
Package URL
pkg:socket/skills-sh/borski%2Ftravel-hacking-toolkit%2Fgardening%2F@f1422fb28d5cb1f5157db550f8900671f24898a4c43a43ecad00c5a2ecfbb95e
Security Audit — socket — gardening