skills/starchild-ai-agent/community-skills/@1393/daily-news/Socket

@1393/daily-news

Warn

Audited by Socket on Mar 18, 2026

1 alert found:

Security

SecuritySKILL.md

MEDIUM

SecurityMEDIUM

SKILL.md

SUSPICIOUS: the skill's stated purpose is narrow, but the provided instruction mainly registers and executes an unverifiable local MCP server. Official `claude` and `uv` reduce installer concern, yet the unverified `daily-news-mcp` payload and transitive trust chain make the overall risk medium-high.

Confidence: 85%Severity: 72%

Audit Metadata

Analyzed At

Mar 18, 2026, 05:18 AM

Package URL

pkg:socket/skills-sh/Starchild-ai-agent%2Fcommunity-skills%2Fdaily-news%2F@2eac0e4f97af333bdf5a4ded5e1f5f70256e89a5