skills/obra/muse-skills/withings/Socket

withings

Warn

Audited by Socket on Oct 8, 2026

1 alert found:

Security

SecuritySKILL.md

MEDIUM

SecurityMEDIUM

SKILL.md

SUSPICIOUS: The skill's purpose and commands are coherent for Withings data access, and its OAuth flow aligns with official Withings behavior. However, it depends on an undocumented local `withings` CLI that is not tied to a verified publisher or official release path in the skill, so sensitive health data and auth state are routed through an unverifiable executable.

Confidence: 82%Severity: 78%

Audit Metadata

Analyzed At

Oct 8, 2026, 11:46 PM

Package URL

pkg:socket/skills-sh/obra%2Fmuse-skills%2Fwithings%2F@3c295509b91f00655979b2983aeab0ddd4cee3fc1bd141404fa10e7c00c460e8