skills/merit-systems/agentcash-skills/news-shopping/Socket

news-shopping

Warn

Audited by Socket on Sep 21, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS. The skill is broadly coherent for paid news/shopping/image search, and the CLI provenance is reasonably verifiable through npm/GitHub/docs. However, it requires executing an external CLI, uses unpinned `@latest`, routes queries through a third-party intermediary instead of the official Serper API, and can spend wallet funds; these make it medium risk rather than benign.

Confidence: 87%Severity: 56%

Audit Metadata

Analyzed At

Sep 21, 2026, 02:56 AM

Package URL

pkg:socket/skills-sh/merit-systems%2Fagentcash-skills%2Fnews-shopping%2F@29fe222f5d45f31bf330b02bb1218481923b78303252a88e33d3bed2e1693085