swiggy-search

Warn

Audited by Socket on Jul 25, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: the skill’s search behavior matches its stated purpose and its data appears intended for official Swiggy endpoints, but it requires trust in a third-party `swiggy-cli` that handles user authentication and tokens. This is not confirmed malware, yet the install/auth trust model is weaker than an official first-party integration and raises meaningful credential-forwarding and supply-chain risk.

Confidence: 86%Severity: 72%
Audit Metadata
Analyzed At
Jul 25, 2026, 07:33 AM
Package URL
pkg:socket/skills-sh/hktitan%2Fswiggy-cli%2Fswiggy-search%2F@b372ad42dd32362795441edfae9e34681d537ad2
Security Audit — socket — swiggy-search