agent-reach

Warn

Audited by Socket on Sep 13, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS. The skill’s research-routing purpose broadly matches its capabilities, but it centralizes browsing through a custom Docker router, relies on nonstandard install/update paths, and references unpinned GitHub-based tool installation. Data flows are mostly proportionate to a read-only research skill, yet supply-chain trust is too weak to classify as benign.

Confidence: 90%Severity: 72%
Audit Metadata
Analyzed At
Sep 13, 2026, 03:57 PM
Package URL
pkg:socket/skills-sh/celeroncoder%2Fskills%2Fagent-reach%2F@d0ef3224bbc5385a3fec5802ab3c7c592aeb23d24739f28c8061848a5ea1adfa
Security Audit — socket — agent-reach