skills/clawlink-hq/skills/discord-bot/Socket

discord-bot

Warn

Audited by Socket on Jun 28, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: the skill is internally coherent as a ClawLink-based Discord connector, and the npm install path looks legitimate, but it centralizes Discord OAuth and action execution through ClawLink rather than direct Discord APIs. That third-party credential/data mediation and ability to perform external communication actions make it medium risk, though not confirmed malware.

Confidence: 87%Severity: 56%

Audit Metadata

Analyzed At

Jun 28, 2026, 02:44 PM

Package URL

pkg:socket/skills-sh/clawlink-hq%2Fskills%2Fdiscord-bot%2F@c59ac7c97c3d1c458ab99d5b92c1859a53ce46c73128de16d5d1ee325be84866