bichon
Warn
Audited by Socket on Oct 14, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS. The skill's capabilities broadly match its stated marketing/workflow purpose, and it includes sensible constraints like never publishing or activating ads. However, trust is weakened because all sensitive actions depend on an unverifiable bundled helper and a non-branded Convex backend that receives the API key and user data; this is disproportionate enough to warrant caution even without clear malicious intent.
Confidence: 90%Severity: 78%
Audit Metadata