dating
Warn
Audited by Socket on Oct 13, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS: The core API calls fit the stated dating-platform purpose, and data mainly flows to the claimed first-party service. The main concerns are transitive trust from plugin/MCP installation, unpinned npx execution, and forwarding/storing tokens in third-party package code, which is broader than direct API use but not enough to call malicious.
Confidence: 84%Severity: 56%
Audit Metadata