readwise-chat
Warn
Audited by Socket on Oct 5, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS: the skill’s purpose is plausible, but it relies on a load-time executable helper and an unverifiable custom CLI that receives Readwise session cookies via a nonstandard auth flow. The core mismatch is not the chat function itself; it is the disproportionate trust placed in unofficial tooling and cookie extraction/forwarding.
Confidence: 93%Severity: 89%
Audit Metadata