paoding

Warn

Audited by Socket on Jul 15, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS. The stated purpose mostly matches content collection and analysis, and the named CLIs are legitimate open-source tools, but the skill expands into authenticated scraping via browser cookies and optional key-based API collection with undisclosed endpoints. The biggest concern is forwarding browser session data and possible API keys to external/local scripts whose exact behavior is not shown, making the skill's real data flows only partially verifiable.

Confidence: 82%Severity: 68%
Audit Metadata
Analyzed At
Jul 15, 2026, 03:58 PM
Package URL
pkg:socket/skills-sh/LearnPrompt%2Fpaoding-skill%2Fpaoding%2F@7524c331b1c2c9aba59100a0da0c9253c59624954fa11b5f8d78fd6eb8bb71e4