answerrank-browser

Warn

Audited by Socket on Oct 16, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS. The workflow mostly matches the stated purpose of measuring in-browser AI answers, and it includes sensible limits like no password entry and stopping on CAPTCHAs. The main issue is trust: the skill depends on an unverifiable `answerrank` CLI and sends it collected content plus judge-model credentials, which is a high-risk credential-forwarding and supply-chain pattern even without direct evidence of malicious intent.

Confidence: 82%Severity: 84%
Audit Metadata
Analyzed At
Oct 16, 2026, 03:13 PM
Package URL
pkg:socket/skills-sh/misbahsy%2Fanswerrank%2Fanswerrank-browser%2F@4c6256c5ecba32cdce38ad150b2655b4b365a1d9b50840f30c5c2321456aed1a