skills/imsuperseller/superseller/whatsapp-waha/Socket

whatsapp-waha

Warn

Audited by Socket on May 18, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: the skill’s capabilities mostly fit its stated WhatsApp purpose, but it routes sensitive OTP and messaging data plus API credentials through a self-hosted WAHA server on a raw HTTP IP rather than an official vendor endpoint. The main risk is insecure and weakly verifiable data flow, not clear malware or hidden behavior.

Confidence: 85%Severity: 68%

Audit Metadata

Analyzed At

May 18, 2026, 05:39 AM

Package URL

pkg:socket/skills-sh/imsuperseller%2Fsuperseller%2Fwhatsapp-waha%2F@23006bc43cee569cf49604bccb98e4f3482c34d1