real-estate-search
Warn
Audited by Socket on Oct 1, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS. The stated purpose is coherent with a real-estate lookup skill, and the npm/GitHub sources appear same-org and legitimate. However, the skill is mostly a stub that delegates behavior to runtime-fetched instructions and uses a publisher-operated proxy instead of direct official APIs, creating moderate trust and reviewability risk disproportionate to a simple data lookup skill.
Confidence: 89%Severity: 52%
Audit Metadata