korean-holiday-calendar

Warn

Audited by Socket on Aug 1, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: the stated purpose is simple holiday lookup, but the skill defers its real behavior to an external CLI and routes API access through a proxy instead of the official endpoint. This is not confirmed malware, but it is an unnecessary trust expansion with medium-high security risk for a read-only utility skill.

Confidence: 84%Severity: 71%
Audit Metadata
Analyzed At
Aug 1, 2026, 06:48 AM
Package URL
pkg:socket/skills-sh/NomaDamas%2Fk-skill%2Fkorean-holiday-calendar%2F@d936ebc2171a9c9bd7a628c64d6e5c6bef76262f6c0a1718723944e38f4d91ba
Security Audit — socket — korean-holiday-calendar