skills/steipete/agent-scripts/telecrawl/Socket

telecrawl

Warn

Audited by Socket on Aug 7, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: the core archive/import behavior matches the stated purpose, but the skill expands data flow to a personal SSH host and an unspecified external git backup target for very sensitive Telegram content. This is not confirmed malware, yet the remote archive/backup pattern and incomplete binary/install provenance make the overall skill medium risk.

Confidence: 82%Severity: 64%

Audit Metadata

Analyzed At

Aug 7, 2026, 12:40 PM

Package URL

pkg:socket/skills-sh/steipete%2Fagent-scripts%2Ftelecrawl%2F@34f2247d4c9a31e97e924d6556f537115a800eb64c0092100f6f1201f5df1d08