skills/tonone-ai/tonone/lens-dashboard/Socket

lens-dashboard

Warn

Audited by Socket on Jul 1, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: the core purpose is plausible, but the skill is over-scoped for a dashboard spec assistant. Reading `.env`/config secrets and invoking an unverified local Python module create medium risk, even without clear evidence of exfiltration or overtly malicious behavior.

Confidence: 79%Severity: 61%

Audit Metadata

Analyzed At

Jul 1, 2026, 02:47 PM

Package URL

pkg:socket/skills-sh/tonone-ai%2Ftonone%2Flens-dashboard%2F@01ccfe21d6f85ae2c84854527f1af6a2133a735e68129283d88652ff9f98534f