planet

Warn

Audited by Socket on Jul 22, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the satellite-imagery functionality is mostly coherent, but the skill relies on a custom host proxy that reads a raw credential file and intermediates all Planet API traffic. That nonstandard credential-routing design, plus optional upload/email handoff, makes the data flow higher risk than a direct official API integration even though the stated task is largely read-only and aligned.

Confidence: 84%Severity: 62%
Audit Metadata
Analyzed At
Jul 22, 2026, 08:28 AM
Package URL
pkg:socket/skills-sh/brevdev%2Fnemoclaw-demos%2Fplanet%2F@dcb00b298ead3e2d52383dc91ad1a96e0b93530803d846eec1907fafd079abec
Security Audit — socket — planet