samsung-smart-tv
Warn
Audited by Socket on Oct 25, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS. The core capability is coherent with SmartThings TV control and uses official SmartThings tooling, so this is not fundamentally incompatible with its stated purpose. The main concern is the default OAuth redirect to third-party httpbin.org, which sends the authorization response through an unrelated service; combined with local plaintext token storage, this creates a meaningful security risk even though the overall skill does not show clear malicious intent.
Confidence: 90%Severity: 56%
Audit Metadata