skills/firecrawl/openclaw/oracle/Socket

oracle

Warn

Audited by Socket on Sep 17, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: The skill is mostly coherent with its stated purpose and uses an official same-owner npm package, so it does not look malicious. Risk is still medium because it asks users to install an external CLI that can receive prompts, selected files, API credentials, and browser-authenticated context, plus it supports remote-host browser control and unpinned npx execution.

Confidence: 85%Severity: 56%

Audit Metadata

Analyzed At

Sep 17, 2026, 07:54 PM

Package URL

pkg:socket/skills-sh/firecrawl%2Fopenclaw%2Foracle%2F@497e8e1bedbea7d4e2043af8008a270b9677e8825f0d0f91a5b82e8fdc3d1ce4