skills/steve-cooks/skills/whop-dev/Socket

whop-dev

Warn

Audited by Socket on Sep 28, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS. The skill’s main functionality is coherent for Whop app development, and I see no confirmed malware or covert exfiltration. However, it unnecessarily expands trust by requiring installation of multiple companion skills and asks users to paste sensitive API keys into the session, making it a medium-risk skill rather than benign.

Confidence: 91%Severity: 64%

Audit Metadata

Analyzed At

Sep 28, 2026, 06:53 AM

Package URL

pkg:socket/skills-sh/steve-cooks%2Fskills%2Fwhop-dev%2F@918f73bc648e4cd01728cc085aa139e4aa5df23e6745489200a8e924c4159a33