last30days-local

Warn

Audited by Socket on Sep 24, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: The skill's purpose and capabilities mostly align for multi-source research, and the documented shell snippets are benign examples. However, it relies on external CLIs—especially Aside, which operates against the user's logged-in browser and has weaker publicly verified install/provenance evidence than gh or yt-dlp—creating a disproportionate trust boundary for a research skill. No direct credential exfiltration or malicious routing is described, but the dependency and browser-session exposure elevate risk.

Confidence: 87%Severity: 58%
Audit Metadata
Analyzed At
Sep 24, 2026, 01:54 PM
Package URL
pkg:socket/skills-sh/dedene%2Fskills%2Flast30days-local%2F@c75e6568783d79802e235d0039a2d26700f026d87543f46d122c43c6a4c51310