skills/romiluz13/rombot-community-skill/rombot-cli/Socket

rombot-cli

Warn

Audited by Socket on Jul 29, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS. The core behavior fits a community Q&A skill, but it relies on transitive skill installation, a nonstandard WhatsApp token flow, and an opaque remote endpoint. The footprint is not overtly malicious, yet install trust and credential handling are only partially transparent, so medium risk is appropriate.

Confidence: 82%Severity: 58%

Audit Metadata

Analyzed At

Jul 29, 2026, 02:22 PM

Package URL

pkg:socket/skills-sh/romiluz13%2Frombot-community-skill%2Frombot-cli%2F@a0f4830f0b3182137bbc2fe468286d81b382fd6b0afdfcdb961c5c497cedcbc9