whatsapp-business

Warn

Audited by Socket on Sep 4, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: the skill’s WhatsApp purpose matches its messaging features, but its core design routes all credentials and message traffic through Maton intermediary domains instead of Meta’s official API. That managed-proxy model and real-world messaging capability create medium-high security risk despite no strong evidence of malware or hidden execution.

Confidence: 89%Severity: 76%
Audit Metadata
Analyzed At
Sep 4, 2026, 01:53 PM
Package URL
pkg:socket/skills-sh/craftos-dev%2Fcraftbot%2Fwhatsapp-business%2F@c19c16b16fb7114129d008010c9e55f1fa181d75d2fbbf84d6487f25782e52f0
Security Audit — socket — whatsapp-business