research

Warn

Audited by Socket on Apr 7, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS. The skill's core purpose is coherent, and the Gemini fallback appears to use an official Google CLI, but the overall footprint is elevated by an unverifiable local Argus broker, background processing of untrusted web content, and a --yolo fallback that grants auto-approved actions disproportionate to simple research. Main concerns are opaque data routing and indirect prompt-injection exposure rather than confirmed malware.

Confidence: 87%Severity: 66%
Audit Metadata
Analyzed At
Apr 7, 2026, 06:02 AM
Package URL
pkg:socket/skills-sh/khamel83%2Foneshot%2Fresearch%2F@e0811fc4993b251e8b86160dce980abc44291e8b