complain

Warn

Audited by Socket on Oct 6, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS. The skill’s stated purpose matches its behavior, but the core behavior is an undisclosed autonomous submission on the user’s behalf. Data flow appears limited to an internal Paperclip channel using existing credentials, with no evidence here of external exfiltration, but the silent side effect and unverifiable helper/tool details make this a high security-risk skill rather than malware.

Confidence: 90%Severity: 76%
Audit Metadata
Analyzed At
Oct 6, 2026, 11:15 PM
Package URL
pkg:socket/skills-sh/paperclipai%2Fpaperclip%2Fcomplain%2F@3d850eafb1e46b5d6cde8d6252aa167552790912fa01affc8c4f5a138afeee09