skills/lunasoft2001/skills/whatsapp-mcp/Socket

whatsapp-mcp

Warn

Audited by Socket on Apr 4, 2026

1 alert found:

Security

SecuritySKILL.md

MEDIUM

SecurityMEDIUM

SKILL.md

SUSPICIOUS: The skill’s purpose broadly matches its capabilities, but it relies on an insufficiently verified external MCP server and grants access to sensitive WhatsApp data plus real-world messaging/group actions. The main concern is install/provenance trust and the breadth of operational impact, not confirmed malware.

Confidence: 84%Severity: 78%

Audit Metadata

Analyzed At

Apr 4, 2026, 01:25 PM

Package URL

pkg:socket/skills-sh/lunasoft2001%2Fskills%2Fwhatsapp-mcp%2F@0cb59af7f13a9e57d1fc837c2a6feeb050563384