pm-search

Warn

Audited by Socket on Aug 15, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the stated research purpose is plausible, and Exa data flow is consistent with official endpoints, but the skill’s core preference for AnySearch is backed by inconsistent install provenance and a transitive external dependency from a personal GitHub repo. Combined with Agent+Bash+Write privileges and recursive web-content processing, this makes the skill higher risk than a normal documentation/search helper.

Confidence: 87%Severity: 68%
Audit Metadata
Analyzed At
Aug 15, 2026, 11:44 AM
Package URL
pkg:socket/skills-sh/konglong87%2Fsuperpm%2Fpm-search%2F@5a4703c2c717581c73df3ba51e2917413b9ae334d2b59dd11df5e2e464a42cd6
Security Audit — socket — pm-search