lazyweb-quick-references

Warn

Audited by Socket on Sep 13, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: the skill’s core behavior matches its stated purpose, and Lazyweb API routing appears to go to the official service, but it expands trust significantly by telling users to install via a one-line remote prompt and by relying on a nonstandard local browse binary from skill directories. The data flows are mostly proportionate for screenshot research, yet the install/execution model is riskier than necessary and merits caution.

Confidence: 90%Severity: 74%
Audit Metadata
Analyzed At
Sep 13, 2026, 10:14 PM
Package URL
pkg:socket/skills-sh/gabelul%2Flazyweb-skill%2Flazyweb-quick-references%2F@7092166d9f9efe15b1fb3e7deeb7bc79abd4247b23d4b249f988a253413d0cfe