skills/demerzels-lab/elsamultiskillagent/mcp-hass/Socket

mcp-hass

Warn

Audited by Socket on Jun 16, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: the stated purpose is plausible, but the visible footprint is too incomplete to verify data flows or credential handling. Main risk is transitive installation through a mutable `npx ...@latest` marketplace path with limited provenance for the specific skill, not confirmed malware.

Confidence: 100%Severity: 60%

Audit Metadata

Analyzed At

Jun 16, 2026, 01:03 AM

Package URL

pkg:socket/skills-sh/Demerzels-lab%2Felsamultiskillagent%2Fmcp-hass%2F@f56581d1bf0592ca98167a0200929bce1497fecf298644b040710e06c767d2c5