imsg

Warn

Audited by Socket on May 19, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS. The capability matches the stated purpose, but the skill grants access to highly sensitive local message history and enables outbound messaging with real-world consequences. No obvious credential theft or hidden exfiltration is present, yet the required permissions and send capability make it a medium-high risk skill that should only be used with strict per-message approval.

Confidence: 85%Severity: 68%
Audit Metadata
Analyzed At
May 19, 2026, 06:48 AM
Package URL
pkg:socket/skills-sh/fengjiehzi%2Fskills%2Fimsg%2F@7aa17c46517c82040601db820f27b7ca2cdefab2