octopus-research

Warn

Audited by Socket on May 9, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: the stated research purpose is plausible, but the skill forces all work through an opaque local executable in the user's home directory and then surfaces files/logs it creates. That unverifiable execution dependency is disproportionate to a markdown skill and prevents verification of where prompts, fetched content, or provider data actually flow.

Confidence: 83%Severity: 78%
Audit Metadata
Analyzed At
May 9, 2026, 06:39 AM
Package URL
pkg:socket/skills-sh/nyldn%2Fclaude-octopus%2Foctopus-research%2F@7f429020c4a201e882ed0b06fd41e6629a2b10db