skills/un-seen/hedwigai-skills/hedwigai/Socket

hedwigai

Warn

Audited by Socket on Oct 14, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS. The skill's capabilities fit its stated research purpose and data flows point to a plausible first-party MCP service, but the installation path introduces a third-party GitHub/plugin trust chain that is not clearly owned by the same organization and is not strongly verifiable. This is a medium supply-chain risk, not confirmed malware.

Confidence: 88%Severity: 58%

Audit Metadata

Analyzed At

Oct 14, 2026, 10:54 AM

Package URL

pkg:socket/skills-sh/un-seen%2Fhedwigai-skills%2Fhedwigai%2F@18798c044ae098b70285fc1a3d73590890bc19de4b7b6ccac08b2b1a9c70ed9b