skills/pika-labs/pika-plugins/baseball-trend/Socket

baseball-trend

Warn

Audited by Socket on Jun 12, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS. The skill is internally coherent and does not show classic malware behavior, but it automates deceptive impersonation media and sends user photos to external services via MCP/upload flows with unclear trust boundaries. Main risk is privacy and misuse, not credential theft or code execution.

Confidence: 100%Severity: 60%

Audit Metadata

Analyzed At

Jun 12, 2026, 07:45 PM

Package URL

pkg:socket/skills-sh/Pika-Labs%2FPika-Plugins%2Fbaseball-trend%2F@8fbf3ebb1194f2b70d0a7d7e58d1e8057c4026faef0fd893c4d4e67817232446