sentiment-monitor

Warn

Audited by Socket on May 13, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the skill’s stated purpose matches sentiment monitoring, but it relies on a powerful third-party CLI and browser extension that operate with cookie-based authenticated sessions across multiple platforms. The install provenance looks plausibly official rather than malicious, yet the combination of wildcard `opencli` access, browser-session forwarding, and mass collection makes this a medium-risk skill with notable credential and data-handling exposure.

Confidence: 82%Severity: 63%
Audit Metadata
Analyzed At
May 13, 2026, 05:24 PM
Package URL
pkg:socket/skills-sh/PBnicad%2Fsentiment-analyst%2Fsentiment-monitor%2F@ceb3f70b043559ce8cfad7184bad9c3075684d6a