uptime-monitor

Warn

Audited by Socket on Mar 29, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS. The stated uptime-monitoring purpose is plausible, but the actual execution path is dominated by an unverified orth CLI that intermediates all API calls and likely receives multiple service credentials. That footprint is disproportionate to a simple monitoring skill and creates high supply-chain and credential-forwarding risk, with added concern from autonomous SMS sending and untrusted web-content processing.

Confidence: 88%Severity: 84%
Audit Metadata
Analyzed At
Mar 29, 2026, 05:59 PM
Package URL
pkg:socket/skills-sh/orthogonal-sh%2Fskills%2Fuptime-monitor%2F@332b73d45c047ff378355a75940ca9e52193b81a