uptime-monitor
Warn
Audited by Socket on Mar 29, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS. The stated uptime-monitoring purpose is plausible, but the actual execution path is dominated by an unverified orth CLI that intermediates all API calls and likely receives multiple service credentials. That footprint is disproportionate to a simple monitoring skill and creates high supply-chain and credential-forwarding risk, with added concern from autonomous SMS sending and untrusted web-content processing.
Confidence: 88%Severity: 84%
Audit Metadata