readwise
Warn
Audited by Socket on Oct 5, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS. The stated purpose—searching and managing a user's Readwise library—is coherent with the official Readwise CLI, but the skill materially expands trust to an unverifiable local readwise-custom binary and an unclear nlm/NotebookLM path. Because the custom CLI can receive account access and private library content, the skill's actual footprint is disproportionate to a normal search helper and carries high supply-chain and credential-forwarding risk.
Confidence: 91%Severity: 86%
Audit Metadata