skills/orthogonal-sh/skills/searchapi/Socket

searchapi

Warn

Audited by Socket on Mar 29, 2026

1 alert found:

Security

SecuritySKILL.md

MEDIUM

SecurityMEDIUM

SKILL.md

SUSPICIOUS. The skill's purpose is coherent, but it relies on an undocumented external `orth` CLI with unverifiable provenance and likely credential handling. Routing searches through SearchApi is expected for the service, yet the missing CLI trust chain and unclear auth flow raise material supply-chain and credential-forwarding risk.

Confidence: 84%Severity: 80%

Audit Metadata

Analyzed At

Mar 29, 2026, 05:58 PM

Package URL

pkg:socket/skills-sh/orthogonal-sh%2Fskills%2Fsearchapi%2F@73c745486674a3b890c0886a1529088ad13d823f