morning-briefing

Warn

Audited by Socket on Sep 16, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS. The skill's broad reads and fan-out match its stated briefing purpose, but it performs autonomous outbound posting and appears to forward Linear credentials through a third-party CLI (`linearis`) instead of clearly using Linear's official API path. With helper scripts and endpoint details absent, install trust and data-flow integrity for Slack/Notion/Google/Loom cannot be fully verified.

Confidence: 82%Severity: 58%
Audit Metadata
Analyzed At
Sep 16, 2026, 09:30 PM
Package URL
pkg:socket/skills-sh/coalesce-labs%2Fcatalyst-dev-skills%2Fmorning-briefing%2F@4cc1472cbd15bf8d30a62a95073df5125f5f4cc34f02d2d86fcd18056897baa1
Security Audit — socket — morning-briefing