last30days-local
Warn
Audited by Socket on Sep 24, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS: The skill's purpose and capabilities mostly align for multi-source research, and the documented shell snippets are benign examples. However, it relies on external CLIs—especially Aside, which operates against the user's logged-in browser and has weaker publicly verified install/provenance evidence than gh or yt-dlp—creating a disproportionate trust boundary for a research skill. No direct credential exfiltration or malicious routing is described, but the dependency and browser-session exposure elevate risk.
Confidence: 87%Severity: 58%
Audit Metadata