pincite

Warn

Audited by Socket on Oct 5, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: the core pincite workflow is coherent and mostly proportionate, but the skill contains load-time pre-execution of a local helper binary unrelated to the essential task and with unverifiable provenance. Network use of Google APIs fits the purpose, but the pre-execution trust boundary makes the overall skill high risk.

Confidence: 88%Severity: 78%
Audit Metadata
Analyzed At
Oct 5, 2026, 10:39 AM
Package URL
pkg:socket/skills-sh/edwinhu%2Fworkflows%2Fpincite%2F@d6897ec7a5bf99652fdbe679648a6382d6dc7bc1d95051f18d392e0831e94550