summarize

Warn

Audited by Socket on Mar 18, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: the stated purpose is coherent, but the skill’s real footprint relies on a non-core third-party CLI and forwards user content plus API keys to external services with limited transparency. The capability broadly fits summarization, yet install trust and credential/data-flow clarity are weaker than expected for a low-risk helper skill.

Confidence: 78%Severity: 72%
Audit Metadata
Analyzed At
Mar 18, 2026, 10:41 PM
Package URL
pkg:socket/skills-sh/elizaos%2Feliza%2Fsummarize%2F@3aa06eae366f437d780d3e514198889ee723281a