paoding
Warn
Audited by Socket on Jul 15, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS. The stated purpose mostly matches content collection and analysis, and the named CLIs are legitimate open-source tools, but the skill expands into authenticated scraping via browser cookies and optional key-based API collection with undisclosed endpoints. The biggest concern is forwarding browser session data and possible API keys to external/local scripts whose exact behavior is not shown, making the skill's real data flows only partially verifiable.
Confidence: 82%Severity: 68%
Audit Metadata