Funai-skill
Warn
Audited by Socket on Aug 7, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS: the core platform-integration behavior is coherent, and the domains appear related to the stated product, but the skill adds a remote setup/update gate from mutable vendor-hosted markdown plus auto-install/auto-update behavior through a non-obviously official publisher account. Credential handling is also broader than ideal because the agent writes tokens into local env files and uses local scripts with them.
Confidence: 82%Severity: 67%
Audit Metadata