skills/edheltzel/recall/source-command-recall-loa/Socket

source-command-recall-loa

Warn

Audited by Socket on Jul 8, 2026

1 alert found:

Security

SecuritySKILL.md

MEDIUM

SecurityMEDIUM

SKILL.md

SUSPICIOUS: the skill’s stated purpose is narrow and mostly coherent, but it delegates all functionality to an unverified external `recall` CLI with no install/provenance details. No clear malware or credential theft is shown, yet the external execution dependency makes trust and review incomplete.

Confidence: 80%Severity: 72%

Audit Metadata

Analyzed At

Jul 8, 2026, 04:29 PM

Package URL

pkg:socket/skills-sh/edheltzel%2FRecall%2Fsource-command-recall-loa%2F@0b27501eb60ba05a300a0635311464308956a8be72519bc419c2ef70cd76d3af