skills/delorenj/skills/oauth-helper/Socket

oauth-helper

Warn

Audited by Socket on Sep 4, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: the stated OAuth-helper purpose is plausible, but the skill externalizes sensitive authentication context to Telegram, supports screenshots/QR transfer, and can perform consequential account-authorization actions. No clear malware or hidden payload is present, but the data flows and scope are broader and riskier than a narrowly scoped login assistant.

Confidence: 83%Severity: 62%

Audit Metadata

Analyzed At

Sep 4, 2026, 06:57 AM

Package URL

pkg:socket/skills-sh/delorenj%2Fskills%2Foauth-helper%2F@a4fba4550213232622fca49f835aabb42a4fdb3d7db7fee869df1b7f917142e8