cyrano

Warn

Audited by Socket on Aug 13, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS. The skill’s capabilities mostly match its meeting-briefing purpose, but risk is elevated by undisclosed local setup code, a bundled blocked-site scraping fork with unclear provenance, untrusted web ingestion, and autonomous outbound delivery to messaging/email channels. I see no confirmed malware or explicit credential harvesting in the supplied text, but the overall footprint is medium risk and should be reviewed with the actual setup/engine code before use.

Confidence: 83%Severity: 63%
Audit Metadata
Analyzed At
Aug 13, 2026, 06:48 AM
Package URL
pkg:socket/skills-sh/crealwork%2Fai-marketing-kit%2Fcyrano%2F@0607514f30db587b3f6d033e13e10201347ffba265a7d6bec8c6b3a78b5a6847
Security Audit — socket — cyrano