skills/d-oit/gemini-search-plugin/web-research/Socket

web-research

Warn

Audited by Socket on Jun 16, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: The stated purpose is coherent, but the skill delegates to an unseen local search agent, processes untrusted web content, and retains Write capability plus analytics tracking. No direct malware indicators or malicious install chain appear in this file, but the hidden subagent provenance and prompt-injection exposure make the overall risk medium.

Confidence: 100%Severity: 60%

Audit Metadata

Analyzed At

Jun 16, 2026, 01:00 AM

Package URL

pkg:socket/skills-sh/d-oit%2Fgemini-search-plugin%2Fweb-research%2F@df45efe5a90bf7475572dc3926d341d4973f3caf60ddfe60f05b2b39cca89050