skills/faberlens/hardened-skills/bear-notes-hardened/Socket

bear-notes-hardened

Warn

Audited by Socket on Apr 21, 2026

1 alert found:

Security

SecuritySKILL.md

MEDIUM

SecurityMEDIUM

SKILL.md

SUSPICIOUS: The skill’s purpose is coherent, but it relies on an unofficial personal-repo CLI installed unpinned from @latest and forwards a Bear API token to that CLI. Data flows are mostly local and the guardrails are helpful, but install trust and credential forwarding raise the overall risk above benign.

Confidence: 89%Severity: 80%

Audit Metadata

Analyzed At

Apr 21, 2026, 06:34 PM

Package URL

pkg:socket/skills-sh/faberlens%2Fhardened-skills%2Fbear-notes-hardened%2F@76645ec2822e20402a21ef78c79aa4af40fe3b74