skills/briansunter/ubersearch/Unified Search/Socket

Unified Search

Warn

Audited by Socket on Apr 8, 2026

1 alert found:

Security

SecuritySKILL.md

MEDIUM

SecurityMEDIUM

SKILL.md

SUSPICIOUS: the stated purpose is coherent for a web-search skill, but the trust model is not. The skill asks Claude Desktop to launch an insufficiently verified `ubersearch` CLI via `bunx` and forwards provider API keys into that process; under the required scoring rules, an unverifiable external CLI receiving credentials is high risk even without proof of malicious behavior.

Confidence: 87%Severity: 88%

Audit Metadata

Analyzed At

Apr 8, 2026, 05:29 PM

Package URL

pkg:socket/skills-sh/briansunter%2Fubersearch%2Funified-search%2F@99f7324c2ff24387f37b7239945bd61613f8c50e