skills/edwinhu/workflows/readwise-docs/Socket

readwise-docs

Warn

Audited by Socket on Oct 5, 2026

1 alert found:

Security

SecuritySKILL.md

MEDIUM

SecurityMEDIUM

SKILL.md

SUSPICIOUS. The official `readwise` CLI is consistent with the skill's purpose, but the skill also relies on `readwise-custom`, an unverified third-party CLI with undisclosed endpoints that can receive account access and handle uploads/deletes. Purpose alignment is mostly coherent, but install/execution trust and data-flow integrity are not.

Confidence: 89%Severity: 84%

Audit Metadata

Analyzed At

Oct 5, 2026, 10:38 AM

Package URL

pkg:socket/skills-sh/edwinhu%2Fworkflows%2Freadwise-docs%2F@f540338941c19c9d4eb988b992275ec633552624d5b610d2fe9f4cc20d71228e