skills/terrylica/cc-skills/agent-reach/Socket

agent-reach

Warn

Audited by Socket on May 28, 2026

1 alert found:

Security

SecuritySKILL.md

MEDIUM

SecurityMEDIUM

SKILL.md

SUSPICIOUS: the skill’s broad internet-reach purpose partly matches its capabilities, but the actual footprint is oversized. Main concerns are unpinned GitHub ZIP installation, auto-update execution, browser cookie extraction, and routing data through multiple third-party tools/services beyond official APIs.

Confidence: 87%Severity: 74%

Audit Metadata

Analyzed At

May 28, 2026, 06:05 AM

Package URL

pkg:socket/skills-sh/terrylica%2Fcc-skills%2Fagent-reach%2F@af5e85e9599aa89ac5c500c4cfde66ab54b94507