web-search

Warn

Audited by Socket on Jul 10, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the stated purpose matches web research, but the footprint is broader than a simple search skill because it requires transitive skill installation, a same-org remote CLI installer, and routes user queries/content through inference.sh as an intermediary. This looks more like a platform wrapper than a direct Tavily/Exa integration; not confirmed malware, but medium risk due to supply-chain trust and intermediary data flow.

Confidence: 87%Severity: 68%
Audit Metadata
Analyzed At
Jul 10, 2026, 07:04 PM
Package URL
pkg:socket/skills-sh/skills-shell%2Fskills%2Fweb-search%2F@4eca27aa1379ba5d0810a944648fec4d898caeab1c3e2bfacdb66da504031ee8