ops-comms

Warn

Audited by Socket on Oct 8, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS. The overall workflow is mostly coherent for a cross-channel comms skill and uses official service endpoints, but it depends on an unprovided local Discord executable that is entrusted with Discord tokens/webhook URLs. That unverifiable credential-handling component makes the skill high risk despite otherwise proportionate messaging behavior and explicit user confirmations.

Confidence: 86%Severity: 82%
Audit Metadata
Analyzed At
Oct 8, 2026, 08:57 PM
Package URL
pkg:socket/skills-sh/davepoon%2Fbuildwithclaude%2Fops-comms%2F@713313a5ad7efec8873245444e374a99f68b1f6679563eade9861675f52532d8