skills/sundial-org/awesome-openclaw-skills/trakt/Socket

trakt

Warn

Audited by Socket on Sep 2, 2026

1 alert found:

Security

SecuritySKILL.md

MEDIUM

SecurityMEDIUM

SKILL.md

SUSPICIOUS. The purpose is coherent, but the install path is not: the skill asks users to install a third-party `trakt-cli` from npm whose provenance and interface do not cleanly match the documented commands, then forwards Trakt OAuth credentials to it. This is primarily a supply-chain and credential-forwarding risk rather than confirmed malware.

Confidence: 90%Severity: 84%

Audit Metadata

Analyzed At

Sep 2, 2026, 05:37 AM

Package URL

pkg:socket/skills-sh/sundial-org%2Fawesome-openclaw-skills%2Ftrakt%2F@37ce260dd3145d99781cbb9ba55cff5a813e9d63dbc6005f168310a62d2bb177