skills/magentosh/skills/web-search/Socket

web-search

Warn

Audited by Socket on Jul 23, 2026

1 alert found:

Security

SecuritySKILL.md

MEDIUM

SecurityMEDIUM

SKILL.md

SUSPICIOUS: the skill’s search purpose is plausible, but its footprint is broader than a normal direct API integration. Main concerns are transitive skill installation, same-org but risky remote installer patterns, broad CLI delegation via `Bash(belt *)`, and routing authenticated queries/content through inference.sh as an intermediary rather than directly to Tavily/Exa/OpenRouter.

Confidence: 84%Severity: 76%

Audit Metadata

Analyzed At

Jul 23, 2026, 06:07 PM

Package URL

pkg:socket/skills-sh/magentosh%2Fskills%2Fweb-search%2F@4eca27aa1379ba5d0810a944648fec4d898caeab1c3e2bfacdb66da504031ee8