kagi-usage

Warn

Audited by Socket on Sep 13, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS. The task scope is coherent for web/page/mail retrieval, but the trust model is not: this skill relies on an unofficial third-party CLI, may forward Kagi credentials and private mail data through it, and instructs transitive loading of other skills. The main concern is supply-chain and credential-handling risk rather than confirmed malicious behavior.

Confidence: 89%Severity: 81%
Audit Metadata
Analyzed At
Sep 13, 2026, 08:17 PM
Package URL
pkg:socket/skills-sh/microck%2Fkagi-cli%2Fkagi-usage%2F@63fddd11df6dbde04dc3c23e686cf353e07b38a8968264518bcbf5764003e95c