swiggy-dineout-booking
Warn
Audited by Socket on Apr 28, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS. The booking workflow matches the stated purpose, but the core execution path relies on an unrelated, unverifiable `swiggy` CLI rather than Swiggy's documented MCP/OAuth interface. That makes install trust and credential/data handling disproportionate to the claimed integration, and the skill can perform real-world bookings through this opaque intermediary.
Confidence: 90%Severity: 86%
Audit Metadata