agent-reach

Warn

Audited by Socket on Oct 16, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS. The core read/search purpose mostly matches the capabilities, but the footprint is broad, includes real-world posting actions, routes some reads through a third-party service, and depends on mutable GitHub-hosted setup plus third-party CLIs. The main concern is supply-chain and trust hygiene rather than confirmed malware.

Confidence: 90%Severity: 74%
Audit Metadata
Analyzed At
Oct 16, 2026, 11:22 PM
Package URL
pkg:socket/skills-sh/gusibi%2Fskills%2Fagent-reach%2F@7f295fa306c10939a38ca235affb4e3290c5924faa9b1bbc2030185890a741f6