client-update
Warn
Audited by Socket on May 19, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS: The core workflow matches the stated purpose, but the skill enables autonomous outbound client communication and routes WhatsApp messages through a third-party intermediary. The biggest concerns are real-world action authority, embedded personal contact data, and unclear Gmail MCP provenance rather than overt malware behavior.
Confidence: 86%Severity: 62%
Audit Metadata