answerrank-browser
Warn
Audited by Socket on Oct 16, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS. The workflow mostly matches the stated purpose of measuring in-browser AI answers, and it includes sensible limits like no password entry and stopping on CAPTCHAs. The main issue is trust: the skill depends on an unverifiable `answerrank` CLI and sends it collected content plus judge-model credentials, which is a high-risk credential-forwarding and supply-chain pattern even without direct evidence of malicious intent.
Confidence: 82%Severity: 84%
Audit Metadata