readwise-search
Warn
Audited by Socket on Oct 5, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS. The core Readwise search workflow is coherent and low risk when limited to the official Readwise CLI and official APIs. The main issue is the undocumented `readwise-custom` CLI: it is not verified as official, broadens the trust boundary, and may receive library access or credentials without provenance. If the skill were limited to the official `readwise` CLI, it would likely be benign.
Confidence: 88%Severity: 74%
Audit Metadata