skills/sebfranklin/franklin-skills/here-now/Socket

here-now

Warn

Audited by Socket on Apr 30, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS. The main upload/auth behavior fits a web-publishing skill, but the footprint has notable trust issues: transitive skill installation, local credential storage, external live-doc dependence, and especially an option to send auth to a non-here.now base URL. The skill is not fundamentally incompatible with its purpose, but its data-flow flexibility and install model make it higher risk than a tightly scoped hosting integration.

Confidence: 80%Severity: 68%

Audit Metadata

Analyzed At

Apr 30, 2026, 10:00 PM

Package URL

pkg:socket/skills-sh/Sebfranklin%2Ffranklin-skills%2Fhere-now%2F@d518dcdf2ae2d44ce9df402455fa89206790a4e7