korea-weather

Warn

Audited by Socket on Oct 1, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS. The visible stub is narrowly described as a weather skill, but its actual behavior is delegated to a same-org remote CLI and mutable remote instructions, limiting reviewability. The install source appears publisher-consistent rather than obviously malicious, so this is not confirmed malware; the main concern is transitive trust, remote instruction drift, and proxy-based data flow that is broader than a simple local weather lookup.

Confidence: 89%Severity: 61%
Audit Metadata
Analyzed At
Oct 1, 2026, 02:42 PM
Package URL
pkg:socket/skills-sh/min9lin9%2Fk-skill%2Fkorea-weather%2F@ee2b60dab47ae5873aa9f7f15fdeb98901fc70b26bedefdc86cdf17289fc3eba