lx-connector
Warn
Audited by Socket on May 20, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS. The skill’s purpose and command flow are coherent, but its core dependency is an unverifiable authenticated `lx` CLI. That creates high supply-chain and credential-forwarding risk even though the documented data flow itself appears aligned with Tencent Meeting/Lexiang import functionality.
Confidence: 84%Severity: 82%
Audit Metadata