skills/masumi-network/sokosumi-cli/sokosumi/Socket

sokosumi

Warn

Audited by Socket on May 28, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: mostly coherent Sokosumi integration with official-brand endpoints and proportionate credential scope, but moderate risk remains from ambiguous CLI distribution/provenance, credential use in a third-party CLI, arbitrary --api-url override, and autonomous external job-creation capability.

Confidence: 84%Severity: 54%

Audit Metadata

Analyzed At

May 28, 2026, 08:04 PM

Package URL

pkg:socket/skills-sh/masumi-network%2Fsokosumi-cli%2Fsokosumi%2F@4cffcae0c56a735585489c82a5e7a2e446725426