bichon

Warn

Audited by Socket on Oct 14, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS. The skill's capabilities broadly match its stated marketing/workflow purpose, and it includes sensible constraints like never publishing or activating ads. However, trust is weakened because all sensitive actions depend on an unverifiable bundled helper and a non-branded Convex backend that receives the API key and user data; this is disproportionate enough to warrant caution even without clear malicious intent.

Confidence: 90%Severity: 78%
Audit Metadata
Analyzed At
Oct 14, 2026, 08:12 AM
Package URL
pkg:socket/skills-sh/stiffjobs%2Fbichon-agent-skill%2Fbichon%2F@df655feefc9cfb623a03f9ab6cf9a9c40c5a36d56c5f96f49847671380a8750a