skills/inference-sh-8/skills/web-search/Socket

web-search

Warn

Audited by Socket on Apr 15, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: the core search/extraction purpose is coherent, and the CLI installer appears same-org and officially documented, but the skill routes user data through an intermediary platform CLI, grants broader-than-needed `infsh` execution, and encourages transitive skill installation. This is not confirmed malware, but it carries meaningful medium risk for data exposure and trust expansion.

Confidence: 83%Severity: 62%

Audit Metadata

Analyzed At

Apr 15, 2026, 01:59 PM

Package URL

pkg:socket/skills-sh/inference-sh-8%2Fskills%2Fweb-search%2F@72fbd6166904ebbf14da1e39de001e83dcc7a9f0