web-search

Warn

Audited by Socket on May 13, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the core search/extraction purpose is plausible, but the skill is broader and riskier than necessary. Main concerns are intermediary data routing through inference.sh instead of direct provider APIs, broad Bash permissions, partially unclear CLI provenance (`belt` vs documented `infsh`), and explicit transitive skill installation instructions. This looks more like a platform bootstrapper than a narrowly scoped web-search skill.

Confidence: 84%Severity: 68%
Audit Metadata
Analyzed At
May 13, 2026, 05:31 PM
Package URL
pkg:socket/skills-sh/inference-skills%2Fskills%2Fweb-search%2F@91310651e57652741b7f16dacd2040ef9bd12db1
Security Audit — socket — web-search