korean-holiday-calendar
Warn
Audited by Socket on Aug 1, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS: the stated purpose is simple holiday lookup, but the skill defers its real behavior to an external CLI and routes API access through a proxy instead of the official endpoint. This is not confirmed malware, but it is an unnecessary trust expansion with medium-high security risk for a read-only utility skill.
Confidence: 84%Severity: 71%
Audit Metadata