hot-monitor

Warn

Audited by Socket on Sep 26, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS. Most of the skill is coherent for a news/trend monitoring tool and uses standard Python packages, but the Twitter capability routes credentials and data through a third-party proxy service instead of the official X API. That mismatch makes the skill moderately risky even though the non-Twitter sources and local reporting flow are otherwise proportionate.

Confidence: 91%Severity: 56%
Audit Metadata
Analyzed At
Sep 26, 2026, 05:09 PM
Package URL
pkg:socket/skills-sh/liyupi%2Fyupi-hot-monitor%2Fhot-monitor%2F@3e76c51ff39f78619608c68125b7697cac17cde14fc20f138784ff97355e7e3a