skills/tinyfish-io/tinyfish-cookbook/tenders-finder/Socket

tenders-finder

Warn

Audited by Socket on Sep 28, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS. The overall purpose is coherent, but the skill depends on a third-party TinyFish agent platform with login and remote execution for a task that could be done more directly, and the install command is inconsistent with the verified official package name. This looks more like elevated supply-chain and credential-forwarding risk than confirmed malicious behavior.

Confidence: 84%Severity: 58%

Audit Metadata

Analyzed At

Sep 28, 2026, 01:05 AM

Package URL

pkg:socket/skills-sh/tinyfish-io%2Ftinyfish-cookbook%2Ftenders-finder%2F@b087dbbb2066a28e8118c37ee5976955a0383fec2c04a850d8ac031f9c6a152a