skills/soia-team/soia-open-pkm-vault-skills/soia-pkm-library-weread-sync/Socket

soia-pkm-library-weread-sync

Warn

Audited by Socket on Aug 6, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

该技能的目的与本地文件写入、微信读书 API 调用总体一致，未见明显与用途无关的越权读取或隐蔽外传。主要风险来自对外部 weread-skills 的强依赖及技能转装信任链：API key 和阅读数据会流向该外部技能，若其发布方或实现不可验证，整体应判为可疑而非恶意。

Confidence: 80%Severity: 68%

Audit Metadata

Analyzed At

Aug 6, 2026, 08:09 AM

Package URL

pkg:socket/skills-sh/soia-team%2Fsoia-open-pkm-vault-skills%2Fsoia-pkm-library-weread-sync%2F@f828d972ddaee34687f11d6b496118cc7abdabaeae2393efecc79d4c031c8724