score

Warn

Audited by Socket on Oct 4, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the core behavior is coherent with prompt scoring, but the skill forwards user prompt content and an API key to a remote vendor hooks endpoint and permits destination override via CONTEXTSTELLAR_BASE_URL. No malware or exploit behavior is evident, but the external data flow and loose endpoint control make it medium risk for sensitive prompts.

Confidence: 91%Severity: 56%
Audit Metadata
Analyzed At
Oct 4, 2026, 08:11 PM
Package URL
pkg:socket/skills-sh/sunnypatneedi%2Fclaude-code-contextstellar%2Fscore%2F@47502d455137805837b6c92ca4d3093c95eef44ccbd2ddf3914fc52ca49aeef2