jev-latest

Warn

Audited by Socket on Sep 23, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: The skill's purpose is coherent, and requested inputs are proportionate, but the actual data flow is mediated through Frevana instead of the official OpenRouter endpoint, and the core shell script was not included for review. This looks more like a third-party gateway integration than outright malware, but the missing executable logic and credential/data routing through an intermediary raise medium security concerns.

Confidence: 86%Severity: 58%
Audit Metadata
Analyzed At
Sep 23, 2026, 04:15 AM
Package URL
pkg:socket/skills-sh/finpeakinc%2Ffrevana-skills%2Fjev-latest%2F@5fa8aed36875b2b634ca523cff7a09032a387e5e65f160ab6cff81d6229ce4e5