skills/paldom/researchkit/advise/Socket

advise

Warn

Audited by Socket on Jul 9, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: the skill’s core behavior is coherent with its stated purpose, but it expands trust to multiple external vendor CLIs and sends the same prompt/context to several providers. Risk is moderate rather than malicious: the main concerns are third-party CLI provenance for `researchkit`, reliance on existing authenticated sessions, and multi-vendor data sharing.

Confidence: 84%Severity: 56%

Audit Metadata

Analyzed At

Jul 9, 2026, 11:35 PM

Package URL

pkg:socket/skills-sh/Paldom%2Fresearchkit%2Fadvise%2F@8f96920050c8ed80230a1a3b65d196334c25ac35797acb2b15b99ecf60274d51