news-sentiment-engine

Warn

Audited by Socket on Oct 23, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: the skill's stated news-briefing purpose is benign, but its optional setup introduces disproportionate trust risk by cloning an unpinned personal repository and potentially passing an Anthropic API key into unreviewed code. This is not confirmed malware, but it is a high-risk supply-chain and credential-forwarding pattern for an AI Agent Skill.

Confidence: 93%Severity: 82%
Audit Metadata
Analyzed At
Oct 23, 2026, 10:34 PM
Package URL
pkg:socket/skills-sh/sickn33%2Fagentic-awesome-skills%2Fnews-sentiment-engine%2F@be07cc0c7b44b82385a88608e44e174050a8e6b0