readwise

Warn

Audited by Socket on Oct 5, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS. The stated purpose—searching and managing a user's Readwise library—is coherent with the official Readwise CLI, but the skill materially expands trust to an unverifiable local readwise-custom binary and an unclear nlm/NotebookLM path. Because the custom CLI can receive account access and private library content, the skill's actual footprint is disproportionate to a normal search helper and carries high supply-chain and credential-forwarding risk.

Confidence: 91%Severity: 86%
Audit Metadata
Analyzed At
Oct 5, 2026, 10:37 AM
Package URL
pkg:socket/skills-sh/edwinhu%2Fworkflows%2Freadwise%2F@965dfe2812c9b26d6016e6c0d59a44d3c8d0e58554ef0d9728874b9c9b8f50ac