skills/replynodes/replynodes-agent-skills/brand-fonts/Socket

brand-fonts

Warn

Audited by Socket on Sep 15, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS. The skill's purpose and capabilities are mostly coherent for brand-font lookup, and it has no install or execution payloads. However, it routes the API key to a ReplyNodes-branded MCP URL that does not match the vendor's documented official MCP endpoint, creating a meaningful credential-routing trust issue.

Confidence: 89%Severity: 58%

Audit Metadata

Analyzed At

Sep 15, 2026, 03:55 PM

Package URL

pkg:socket/skills-sh/replynodes%2Freplynodes-agent-skills%2Fbrand-fonts%2F@c4f786b4295426e7d82d561fe497072c65507dfb00105a6f3016e761d58d1b80