didit
Warn
Audited by Socket on Mar 29, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS. The skill's stated purpose aligns with Didit's real API capabilities, but its actual execution path relies on an unverified `orth` CLI that was not shown to be official or same-org with Didit. Because sensitive PII and likely API credentials are forwarded through that intermediary, the skill has high supply-chain and credential-forwarding risk despite otherwise plausible functionality.
Confidence: 89%Severity: 84%
Audit Metadata