freesearch

Warn

Audited by Socket on Apr 7, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS. The skill’s research purpose mostly matches its behavior, but it routes queries through an intermediary broker, processes untrusted search content with write access, and performs automatic git commit/push to a shared global cache. The main risk is not overt malware but disproportionate autonomy and prompt-injection exposure for a research helper.

Confidence: 84%Severity: 66%
Audit Metadata
Analyzed At
Apr 7, 2026, 06:02 AM
Package URL
pkg:socket/skills-sh/khamel83%2Foneshot%2Ffreesearch%2F@c6c68131e505223ce19fc1682ef62144c83f9cdc