web-search
Warn
Audited by Socket on May 16, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS: the skill’s purpose and capabilities mostly align, but it requires trust in the inference.sh CLI and backend as an intermediary for Tavily/Exa/OpenRouter operations, and it promotes transitive skill installation. This is not confirmed malware, but it carries medium security and privacy risk due to third-party routing, external CLI trust, and untrusted web-content processing.
Confidence: 84%Severity: 58%
Audit Metadata