readwise-prune

Warn

Audited by Socket on Oct 5, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS. The skill’s purpose and delete workflow are coherent and safety-gated, but it relies on `readwise-custom`, an unverified custom CLI not documented by Readwise. Since this tool likely receives Readwise credentials or authenticated session state and no official install/source provenance is provided, the skill has high supply-chain risk despite otherwise proportional behavior.

Confidence: 91%Severity: 83%
Audit Metadata
Analyzed At
Oct 5, 2026, 10:37 AM
Package URL
pkg:socket/skills-sh/edwinhu%2Fworkflows%2Freadwise-prune%2F@20d91c7e2937decf17c0e34c61b9c4212404a7efc774158c894380f13ba10def