chrome-health-check

Warn

Audited by Socket on Apr 28, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: The core purpose is legitimate and data flows stay within local tooling plus official Anthropic services, so this is not malware. However, the skill is over-scoped for a simple health check: it reads raw local app storage, exposes hard-coded personal account identifiers, and instructs access to email-based magic-link login. The main concerns are privacy and disproportionate credential/account handling, not supply-chain abuse or exfiltration.

Confidence: 90%Severity: 58%
Audit Metadata
Analyzed At
Apr 28, 2026, 01:40 PM
Package URL
pkg:socket/skills-sh/MSApps-Mobile%2Fclaude-plugins%2Fchrome-health-check%2F@43f50a07b6c6fe6fc6683bd995c0d77ff809dac2
Security Audit — socket — chrome-health-check