meetup-manager
Warn
Audited by Socket on Aug 29, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS: the core meetup-management purpose matches the documented API/MCP actions, and data appears to flow to the claimed service endpoint, but the skill meaningfully expands trust by installing another skill transitively and by instructing the agent to collect raw browser session cookies or tokens from users. The autonomous email/action surface further raises risk.
Confidence: 85%Severity: 76%
Audit Metadata