read

Warn

Audited by Socket on May 14, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the core purpose is coherent, but the skill’s actual data flow is broader than necessary because it routes arbitrary URLs through third-party proxy services and relies on undisclosed helper commands. This looks more like a risky web-reading utility than malware, with the main concerns being proxy-mediated content exposure, opaque execution steps, and untrusted-content handling.

Confidence: 81%Severity: 61%
Audit Metadata
Analyzed At
May 14, 2026, 03:31 AM
Package URL
pkg:socket/skills-sh/ninehills%2Fskills%2Fread%2F@ca35320248e45c4e8d4a0e6b6bbd7ccc92072640
Security Audit — socket — read