api-tester

Warn

Audited by Socket on Mar 29, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: the stated purpose is plausible, but the skill’s real footprint depends on an unverifiable `orth` CLI and routes API testing/documentation through third-party services rather than official target APIs. That makes install trust weak and data flow integrity questionable, especially if users provide private endpoints or internal docs URLs.

Confidence: 82%Severity: 78%
Audit Metadata
Analyzed At
Mar 29, 2026, 05:58 PM
Package URL
pkg:socket/skills-sh/orthogonal-sh%2Fskills%2Fapi-tester%2F@5ee64fb7d802c6eecf18480581b803f897a46e33