readwise-chat

Warn

Audited by Socket on Oct 5, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: the skill’s purpose is plausible, but it relies on a load-time executable helper and an unverifiable custom CLI that receives Readwise session cookies via a nonstandard auth flow. The core mismatch is not the chat function itself; it is the disproportionate trust placed in unofficial tooling and cookie extraction/forwarding.

Confidence: 93%Severity: 89%
Audit Metadata
Analyzed At
Oct 5, 2026, 10:38 AM
Package URL
pkg:socket/skills-sh/edwinhu%2Fworkflows%2Freadwise-chat%2F@8cfae0bd5f4fad437e0d31dcabdff295551f73831c8af4ca79491846ea77b15a