9router-embeddings

Warn

Audited by Socket on Sep 15, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS. The skill’s capabilities fit its stated embeddings purpose, and the publisher/source relationship for 9Router appears legitimate. However, it forwards text and API credentials to a user-defined proxy/gateway rather than official provider APIs, so trust hinges on the operator of NINEROUTER_URL and any custom upstream base URLs. This is not confirmed malware, but it is a meaningful credential and data-routing risk.

Confidence: 90%Severity: 58%
Audit Metadata
Analyzed At
Sep 15, 2026, 01:43 PM
Package URL
pkg:socket/skills-sh/decolua%2F9router%2F9router-embeddings%2F@0411d0f11b43bf4764f73e92c9150cd082bbc27be367c557456585a2e680cc63