people-property

Warn

Audited by Socket on Sep 21, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS. The skill’s purpose matches its lookup behavior, and the `agentcash` install path appears same-org and registry-based, but the actual data flow routes highly sensitive PII through third-party `stableenrich.dev` endpoints rather than an obviously official Whitepages API. Combined with mutable `npx ...@latest` execution and paid wallet setup, this is coherent but medium-risk and privacy-sensitive.

Confidence: 84%Severity: 56%
Audit Metadata
Analyzed At
Sep 21, 2026, 02:57 AM
Package URL
pkg:socket/skills-sh/merit-systems%2Fagentcash-skills%2Fpeople-property%2F@22bd9a870fbde3cbc420bbf2d17a7a3ed9977f09095ee1718614c6cb398f526b
Security Audit — socket — people-property