deep-research

Warn

Audited by Socket on Jul 29, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: the core research workflow is coherent, but the skill's mandatory auto-publishing and dependency on another skill materially expand scope beyond research. Its combination of untrusted web ingestion, command execution, file generation, and default public posting makes it high risk even without clear malware or credential theft behavior.

Confidence: 89%Severity: 82%
Audit Metadata
Analyzed At
Jul 29, 2026, 02:57 PM
Package URL
pkg:socket/skills-sh/lovstudio%2Fgeneral-skills%2Fdeep-research%2F@6a2766ff02d71ba7fb058873a33172a2a22fd490de3975237ff1c5667c603798
Security Audit — socket — deep-research