web-search

Warn

Audited by Socket on Apr 22, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the core search/extraction purpose is plausible, but the skill is broader and riskier than necessary. Main concerns are intermediary data routing through inference.sh instead of direct provider APIs, broad Bash permissions, partially unclear CLI provenance (`belt` vs documented `infsh`), and explicit transitive skill installation instructions. This looks more like a platform bootstrapper than a narrowly scoped web-search skill.

Confidence: 84%Severity: 68%
Audit Metadata
Analyzed At
Apr 22, 2026, 04:25 PM
Package URL
pkg:socket/skills-sh/inference-shell%2Fskills%2Fweb-search%2F@07031dc03b8042d7b050d7b6b4d9ece46e1f6136
Security Audit — socket — web-search