blue-ribbon-nearby
Warn
Audited by Socket on Apr 14, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
The skill’s stated purpose is coherent, and the official Blue Ribbon endpoints fit the use case. The main concern is data-flow integrity: user location and premium Blue Ribbon access are routed through k-skill-proxy instead of staying on the official domain, making this better classified as suspicious than benign.
Confidence: 80%Severity: 63%
Audit Metadata