writing-assistant

Warn

Audited by Socket on Apr 4, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS. The core purpose is coherent, and the final network target is the official InfraNodus domain, so this is not strongly malicious. Risk comes from forwarding user text and API credentials through a third-party CLI (mcporter) for functionality that goes beyond simple writing assistance; this makes the skill moderately risky but not incompatible with its stated purpose.

Confidence: 87%Severity: 56%
Audit Metadata
Analyzed At
Apr 4, 2026, 11:14 PM
Package URL
pkg:socket/skills-sh/infranodus%2Fskills%2Fwriting-assistant%2F@3b6eb0cf1aee72578a2422f184a70c4e50d34bb2
Security Audit — socket — writing-assistant