skills/tt-a1i/idea_finder/idea-finder/Socket

idea-finder

Warn

Audited by Socket on Aug 18, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: the stated purpose matches market-research operations, but the skill offloads nearly all trust to an external CLI whose installation source and implementation are not shown here. Credential use is proportionate, yet external-content ingestion plus workspace mutation creates meaningful risk, and endpoint/provenance verification is incomplete from the provided fragment.

Confidence: 78%Severity: 58%

Audit Metadata

Analyzed At

Aug 18, 2026, 01:15 AM

Package URL

pkg:socket/skills-sh/tt-a1i%2Fidea_finder%2Fidea-finder%2F@f1e3221e67c716d6ce9aac7ad355facac964e004f24ee38d97b640d06018f259