readwise-search

Warn

Audited by Socket on Oct 5, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS. The core Readwise search workflow is coherent and low risk when limited to the official Readwise CLI and official APIs. The main issue is the undocumented `readwise-custom` CLI: it is not verified as official, broadens the trust boundary, and may receive library access or credentials without provenance. If the skill were limited to the official `readwise` CLI, it would likely be benign.

Confidence: 88%Severity: 74%
Audit Metadata
Analyzed At
Oct 5, 2026, 10:38 AM
Package URL
pkg:socket/skills-sh/edwinhu%2Fworkflows%2Freadwise-search%2F@7acfa570f0af77f331e21aaf8d394dfd01965b4058d9820ee87c40426d6c7663