weibo-hot-search

Warn

Audited by Socket on Jul 14, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the skill’s purpose is coherent, but it relies on a third-party intermediary for Weibo data and an unseen local script that forwards a locally stored API key to redfox.hk. The scope is not wildly disproportionate, yet the non-official data path and unverifiable script behavior create medium security risk.

Confidence: 81%Severity: 58%
Audit Metadata
Analyzed At
Jul 14, 2026, 07:41 AM
Package URL
pkg:socket/skills-sh/redfox-data%2Fredfox-community%2Fweibo-hot-search%2F@c21a112367dfd524a271ecb06f8a1a3eec32d5a18d04ffb056df76167e64d251
Security Audit — socket — weibo-hot-search