swiggy-search
Warn
Audited by Socket on Jul 25, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS: the skill’s search behavior matches its stated purpose and its data appears intended for official Swiggy endpoints, but it requires trust in a third-party `swiggy-cli` that handles user authentication and tokens. This is not confirmed malware, yet the install/auth trust model is weaker than an official first-party integration and raises meaningful credential-forwarding and supply-chain risk.
Confidence: 86%Severity: 72%
Audit Metadata