grokipedia-cli

Warn

Audited by Socket on Oct 1, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS. The skill’s functional scope mostly matches its purpose, but it depends on an unofficial third-party CLI for a branded external service and allows endpoint override via `GROKIPEDIA_API_URL`. Data flow is mainly read-only to public content, so there is limited evidence of outright malicious behavior, but the external CLI trust and arbitrary target override make the skill medium-high risk.

Confidence: 85%Severity: 72%
Audit Metadata
Analyzed At
Oct 1, 2026, 02:20 AM
Package URL
pkg:socket/skills-sh/dl-alexandre%2Fskills%2Fgrokipedia-cli%2F@9ebf540d807995e60795b9f4c9950649304f89d8f98e0a71c28e90aff7a63d39