orca-dispatch-reference

Warn

Audited by Socket on Oct 14, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: the core dispatch/reference purpose mostly matches the commands shown, but the skill exceeds a simple reference by directing real external actions, forwards bearer-authenticated data to a non-obviously official AgentMemory domain, and disables TLS verification with curl -k. External CLI/hook dependencies are partly verifiable but still increase trust and interception risk.

Confidence: 86%Severity: 78%
Audit Metadata
Analyzed At
Oct 14, 2026, 02:25 AM
Package URL
pkg:socket/skills-sh/rheinmir%2Fskills%2Forca-dispatch-reference%2F@70b4b58cf6b5ac6d820a4f601d853665d14081c9bf8356f7600417588178bb16