bypass-pangram

Warn

Audited by Socket on Oct 20, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the skill’s core purpose is to evade Pangram detection, and its recommended path routes user text and potentially detector credentials through Rephrasy-controlled tooling rather than official detector APIs. The package/source relationship appears same-org and not overtly malicious, but the credential-forwarding and intermediary data flow are disproportionate for a simple writing aid.

Confidence: 88%Severity: 68%
Audit Metadata
Analyzed At
Oct 20, 2026, 10:18 PM
Package URL
pkg:socket/skills-sh/rephrasyai%2Frephrasy-skills%2Fbypass-pangram%2F@5a02f7697a868448351d357e1a1f135b881922039011b0695260084d9a42c638