skills/lensetek/brevetab-agent-skills/tax-ui-visualizer/Socket

tax-ui-visualizer

Warn

Audited by Socket on Jul 15, 2026

1 alert found:

Security

SecuritySKILL.md

MEDIUM

SecurityMEDIUM

SKILL.md

SUSPICIOUS: the offline HTML visualizer is broadly consistent with the stated purpose, but the desktop GUI mode is riskier than advertised. Its core behavior is a shell-based launcher for external AI CLIs, with a clear command-injection flaw and under-disclosed external data flow for sensitive tax prompts.

Confidence: 89%Severity: 76%

Audit Metadata

Analyzed At

Jul 15, 2026, 09:16 AM

Package URL

pkg:socket/skills-sh/lensetek%2FBrevetAB-Agent-Skills%2Ftax-ui-visualizer%2F@5bdad9b3bbb1b34e748a6ce09aaebf61c9d1732a02e6e77ea17fb7cc940feed7