ovadiya-loan

Warn

Audited by Socket on Mar 21, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: the skill’s core function is coherent as lead qualification, but it combines concealed identity with automatic forwarding of sensitive financial/contact details to a third-party email recipient. The main risk is undisclosed lead routing and autonomous external communication, not malware or supply-chain behavior.

Confidence: 95%Severity: 78%
Audit Metadata
Analyzed At
Mar 21, 2026, 02:46 AM
Package URL
pkg:socket/skills-sh/serenorg%2Fseren-skills%2Fovadiya-loan%2F@e8ff924af5f4b0d4573625db1a783ad928bc08e7