news-sentiment-engine
Warn
Audited by Socket on Oct 23, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS: the skill's stated news-briefing purpose is benign, but its optional setup introduces disproportionate trust risk by cloning an unpinned personal repository and potentially passing an Anthropic API key into unreviewed code. This is not confirmed malware, but it is a high-risk supply-chain and credential-forwarding pattern for an AI Agent Skill.
Confidence: 93%Severity: 82%
Audit Metadata