korea-weather
Warn
Audited by Socket on Oct 1, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS. The visible stub is narrowly described as a weather skill, but its actual behavior is delegated to a same-org remote CLI and mutable remote instructions, limiting reviewability. The install source appears publisher-consistent rather than obviously malicious, so this is not confirmed malware; the main concern is transitive trust, remote instruction drift, and proxy-based data flow that is broader than a simple local weather lookup.
Confidence: 89%Severity: 61%
Audit Metadata