skills/replynodes/replynodes-brand-fonts/brand-fonts/Socket

brand-fonts

Warn

Audited by Socket on Sep 15, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS. The skill's purpose and capabilities are mostly coherent for brand-font lookup, and it has no install or execution payloads. However, it routes the API key to a ReplyNodes-branded MCP URL that does not match the vendor's documented official MCP endpoint, creating a meaningful credential-routing trust issue.

Confidence: 89%Severity: 58%

Audit Metadata

Analyzed At

Sep 15, 2026, 04:08 PM

Package URL

pkg:socket/skills-sh/replynodes%2Freplynodes-brand-fonts%2Fbrand-fonts%2F@4fdb119033594d9584ebc4f00beae20b8a3768e0