yc-batch-evaluator

Warn

Audited by Socket on Mar 29, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS. The stated purpose is plausible, but the actual footprint is too broad: it autonomously scrapes many external sources, enriches founders with personal-email lookup, writes and shares external spreadsheets, and routes all credentials/API traffic through an unverified `orth` CLI. The biggest concern is credential forwarding and data flow through an unverifiable intermediary, not the YC research task itself.

Confidence: 84%Severity: 86%
Audit Metadata
Analyzed At
Mar 29, 2026, 05:59 PM
Package URL
pkg:socket/skills-sh/orthogonal-sh%2Fskills%2Fyc-batch-evaluator%2F@bd9fead3ebce39f8b7500bff8076b048e4fd37ef