api-client-tester-waruna834

Warn

Audited by Socket on Oct 8, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: The skill’s functional scope mostly matches API testing, and its network flows are consistent with that purpose, but the install path is high-risk and insufficiently verifiable. The main concerns are executing code from an unverifiable third-party GitHub repo and the documented TLS verification bypass example.

Confidence: 91%Severity: 78%
Audit Metadata
Analyzed At
Oct 8, 2026, 11:45 PM
Package URL
pkg:socket/skills-sh/reason-machines%2Fdevtools-skills%2Fapi-client-tester-waruna834%2F@7634bfffe40dd282d4f4989d50123345a8571234765c6ac54e9c0019a90139fc