skills/infsh-skills/skills/web-search/Socket

web-search

Warn

Audited by Socket on May 27, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: the stated purpose matches web research, but the implementation depends on inference.sh as an intermediary for Tavily/Exa/OpenRouter operations instead of direct official APIs, and it requires transitive skill installation. This is not confirmed malware, but it carries medium risk from third-party data routing, credential forwarding potential, and supply-chain trust expansion.

Confidence: 82%Severity: 64%

Audit Metadata

Analyzed At

May 27, 2026, 04:47 PM

Package URL

pkg:socket/skills-sh/infsh-skills%2Fskills%2Fweb-search%2F@3af5ba1bbf736494a7bc77d17baa7c5c20e2ae53