configure-notifications

Warn

Audited by Socket on Jul 29, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: The core behavior mostly matches a notification-configuration skill, but the generic webhook and generic CLI features expand data flow and execution beyond the native purpose. There is no strong malware signal or suspicious installer path, yet the ability to persist secrets and configure arbitrary outbound endpoints/commands makes the skill medium risk rather than benign.

Confidence: 85%Severity: 52%
Audit Metadata
Analyzed At
Jul 29, 2026, 03:29 PM
Package URL
pkg:socket/skills-sh/mrzhangguoguo%2Foh-my-workbuddy%2Fconfigure-notifications%2F@dc3b2de84a8c52fc09c7061450e129f1d95622f099365799ba61e115b7971943