deep-dive-research-orchestrator

Warn

Audited by Socket on Jun 16, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS rather than malicious. The research purpose broadly matches web-search capabilities, and there is no clear credential harvesting or secret-file access. However, the skill overstates safety: it claims no external dependencies while relying on five unverified third-party skills, and its branding/tool descriptions are internally inconsistent. Main risks are transitive skill trust and untrusted-web-content processing, not confirmed malware.

Confidence: 100%Severity: 60%
Audit Metadata
Analyzed At
Jun 16, 2026, 01:27 PM
Package URL
pkg:socket/skills-sh/broomva%2Fskills%2Fdeep-dive-research-orchestrator%2F@153273c2eaffb770b6f5fcbd67870e2746741e3435c5bc69f5da32e7bf122bf9
Security Audit — socket — deep-dive-research-orchestrator