southwest

Warn

Audited by Socket on Oct 21, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the skill is mostly coherent with its stated Southwest-search purpose, but it relies on stealth automation designed to bypass bot detection and optionally forwards Southwest credentials into a mutable third-party container/image path. Data flows target the official Southwest site, so this is not clear credential harvesting, but install trust and credential-forwarding are broader than ideal for a fare-search skill.

Confidence: 89%Severity: 61%
Audit Metadata
Analyzed At
Oct 21, 2026, 06:39 PM
Package URL
pkg:socket/skills-sh/borski%2Ftravel-hacking-toolkit%2Fsouthwest%2F@f5a37eb3f15378a26db7663589a41d714bbf0f9c787747b2aa985fdcf0b64223