skills/justintravala/travel-skills/manage-booking/Socket

manage-booking

Warn

Audited by Socket on Sep 16, 2026

1 alert found:

Security

SecuritySKILL.md

MEDIUM

SecurityMEDIUM

SKILL.md

SUSPICIOUS: The skill’s stated purpose is narrow and the requested data is broadly relevant, but it routes personal booking data through a third-party npm CLI with an unpinned latest install and no clearly verified official publisher-to-service relationship. This is more a supply-chain and data-flow trust problem than confirmed malware.

Confidence: 80%Severity: 76%

Audit Metadata

Analyzed At

Sep 16, 2026, 12:02 PM

Package URL

pkg:socket/skills-sh/justintravala%2Ftravel-skills%2Fmanage-booking%2F@499837d168bcf7ff5ddbe5d03b748fdd11746f8b239a6cc16f766b7d5de728a0