skills/davidondrej/skills/signal-from-expert/Socket

signal-from-expert

Warn

Audited by Socket on Sep 4, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: the core purpose is coherent, but the skill expands trust by loading another skill, sourcing a local API-key file, and routing search/scrape traffic through a third-party beta service that stores request data. This is not clearly malicious, but the trust chain and credential/data handling are broader than a strictly local manual analysis skill needs.

Confidence: 84%Severity: 59%

Audit Metadata

Analyzed At

Sep 4, 2026, 05:48 AM

Package URL

pkg:socket/skills-sh/davidondrej%2Fskills%2Fsignal-from-expert%2F@6bb85a98f30406d5a31d4b03e07472a53da1aac0bfbb68b31b2f390ee5d2ab71