skills/huangcheng/skills/dida365/Socket

dida365

Warn

Audited by Socket on Mar 17, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: the declared purpose is coherent for a task-management skill, and the listed actions match TickTick/Dida365 workflows, but the skill hides the trust boundary by referencing opaque `mcp__dida__*` tools without stating what backend, publisher, or auth flow is used. Risk is mainly supply-chain and credential-handling uncertainty rather than confirmed malicious behavior.

Confidence: 82%Severity: 52%

Audit Metadata

Analyzed At

Mar 17, 2026, 03:01 AM

Package URL

pkg:socket/skills-sh/huangcheng%2Fskills%2Fdida365%2F@f162a6aca01bd7cd948b1ee58a31e6bf5b4ab1b1