enrich-waterfall

Warn

Audited by Socket on Jul 29, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: the enrichment purpose broadly matches the capability, but the data flow is not proportionate because almost all lookups and payments are routed through SELAT-controlled intermediaries instead of official vendor APIs. The skill is not confirmed malware, but it carries medium-high security risk due to third-party proxying of personal data, paid autonomous execution, and transitive trust in the SELAT tooling stack.

Confidence: 83%Severity: 71%
Audit Metadata
Analyzed At
Jul 29, 2026, 07:36 PM
Package URL
pkg:socket/skills-sh/SELAT-AI%2Fselat-skills%2Fenrich-waterfall%2F@fe7347d4aea68b783eff788d8c6bbd47815467b2bdd453963f7bfa8bc6d5f802
Security Audit — socket — enrich-waterfall