ae-community

Warn

Audited by Socket on May 11, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: The skill’s functional scope matches community analytics, but it requires an unverifiable external CLI and forwards tokens to it, including access to cached local credentials and a claimed browser-token extraction flow. Data routing mostly appears consistent with ThinkingData, yet the binary provenance is not publicly verifiable, so the risk is high even without stronger evidence of malicious intent.

Confidence: 87%Severity: 84%
Audit Metadata
Analyzed At
May 11, 2026, 07:26 AM
Package URL
pkg:socket/skills-sh/ThinkingAIAgenticEngine%2Fae-cli%2Fae-community%2F@2cb60db73c8592add89ca2cb41f2ccf468f570f5
Security Audit — socket — ae-community