extractor

Warn

Audited by Socket on Aug 26, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: the stated purpose is coherent for document extraction, but the skill depends on an unverified local Extractor binary and opaque wrapper scripts, with optional undisclosed network enrichment. Scope is mostly proportionate, yet install/execution trust and data-flow transparency are insufficient for a benign classification.

Confidence: 82%Severity: 78%
Audit Metadata
Analyzed At
Aug 26, 2026, 06:02 PM
Package URL
pkg:socket/skills-sh/grahama1970%2Fagent-skills%2Fextractor%2F@21e7ea5e8647209bd4536780e3975a9db219241a
Security Audit — socket — extractor