skills/tonone-ai/tonone/lens-report/Socket

lens-report

Warn

Audited by Socket on Jul 1, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: The skill’s purpose is coherent, and it does not contain a risky install path or third-party credential proxy. However, it instructs the agent to discover local secrets and then use them for automated outbound messaging, with broad tools and limited approval boundaries, making it moderately risky for credential exposure and autonomous actions.

Confidence: 86%Severity: 61%

Audit Metadata

Analyzed At

Jul 1, 2026, 02:47 PM

Package URL

pkg:socket/skills-sh/tonone-ai%2Ftonone%2Flens-report%2F@b1f147433c478bdc071c8c9c49631919828bda257448b151e2aa54003c153255