skills/sanketkothiya2/habitflow/local-server/Socket

local-server

Warn

Audited by Socket on Mar 27, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: the skill's purpose is coherent, and its Cloudflare tunnel usage appears official and legitimate, but it intentionally exposes a local orchestrator with full local file and credential access to external traffic. Risk is driven less by malicious install behavior and more by disproportionate exposure and the unreviewed server code behind powerful endpoints.

Confidence: 86%Severity: 62%

Audit Metadata

Analyzed At

Mar 27, 2026, 12:43 AM

Package URL

pkg:socket/skills-sh/sanketkothiya2%2FHabitflow%2Flocal-server%2F@95ba13d1ac9d8d78d4ddcde9649218f63d9d3d5e