b2b-booking

Warn

Audited by Socket on Jun 1, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS. The business purpose is coherent with hotel booking, but the trust and data-flow model is weak: it stores a reusable credential locally, sends it with booking data to opaque infrastructure endpoints, and does so over plain HTTP. The skill also enables real-world booking and payment actions. Main risk is insecure transport and unverified backend provenance, not confirmed malware.

Confidence: 91%Severity: 89%
Audit Metadata
Analyzed At
Jun 1, 2026, 08:28 AM
Package URL
pkg:socket/skills-sh/tourmind-com%2FHotel-Booking-AI%2Fb2b-booking%2F@d9f8686b4ca6d0a613164dfdd37db0b9a250f4b9