subway-info

Warn

Audited by Socket on Apr 18, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS. The overall purpose is benign and the credential scope is proportionate, but trust is weakened by two internal inconsistencies: a preferred CLI with no verifiable official distribution evidence, and REST examples that reportedly do not match the service's official documentation. This looks more like inaccurate or overstated integration guidance than confirmed malware, but it carries medium supply-chain and reliability risk.

Confidence: 90%Severity: 53%
Audit Metadata
Analyzed At
Apr 18, 2026, 03:40 AM
Package URL
pkg:socket/skills-sh/ckorhonen%2Fclaude-skills%2Fsubway-info%2F@70cbd507929b82e0ea6ec2e7cb0a5cddafa94bce
Security Audit — socket — subway-info