Funai-skill

Warn

Audited by Socket on Aug 7, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the core platform-integration behavior is coherent, and the domains appear related to the stated product, but the skill adds a remote setup/update gate from mutable vendor-hosted markdown plus auto-install/auto-update behavior through a non-obviously official publisher account. Credential handling is also broader than ideal because the agent writes tokens into local env files and uses local scripts with them.

Confidence: 82%Severity: 67%
Audit Metadata
Analyzed At
Aug 7, 2026, 03:34 PM
Package URL
pkg:socket/skills-sh/LeoYeAI%2Fopenclaw-master-skills%2Ffunai-skill%2F@f9b27a80c037743cb8cafdb2b8158433ee25bac9
Security Audit — socket — Funai-skill