lazyweb-quick-references
Warn
Audited by Socket on Sep 13, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS: the skill’s core behavior matches its stated purpose, and Lazyweb API routing appears to go to the official service, but it expands trust significantly by telling users to install via a one-line remote prompt and by relying on a nonstandard local browse binary from skill directories. The data flows are mostly proportionate for screenshot research, yet the install/execution model is riskier than necessary and merits caution.
Confidence: 90%Severity: 74%
Audit Metadata