lx-search

Warn

Audited by Socket on May 20, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: The skill’s behavior is mostly aligned with its stated enterprise search/people-lookup purpose, and no malicious data-routing or download-execute behavior appears in the text. However, it relies on an already logged-in `lx` CLI that could not be publicly verified, so the main risk is opaque executable trust with authenticated enterprise data access rather than confirmed malware.

Confidence: 84%Severity: 72%
Audit Metadata
Analyzed At
May 20, 2026, 09:43 PM
Package URL
pkg:socket/skills-sh/tencent-lexiang%2Flexiang-cli%2Flx-search%2F@94158976dfa18f1983711570b721aff89276e12f
Security Audit — socket — lx-search